Security of the plugins

[pmbauer]

@davidg707

So perhaps a mechanism to ‘report’ a plugin is in order?

email and responsible disclosure exist.
That and the devs can remotely disable plugins