In reply to Remy.

So instead of a user having his or her content potentially held hostage by a hacker, s/he should agree to having that content effectively held hostage by the SaaS provider? How is that better?

And let's think about where the logic of the SaaS suggestion leads to. If every plugin developer were to make his or her plugin available only on this model, then the plugin eco-system would vanish completely.

Either you'd just have plugins developed by that SaaS provider, or else every plugin developer would have to try to do a deal with a SaaS provider to get his or her plugin offered and supported on the platform.

Frankly, if that's the cure, I'd prefer to have the disease.