In reply to Carl Hancock.

Agreed. However, that doesn't mean there isn't use case for this kind of plugin. A lot of WordPress users first contact with WP is through having a website built for them. In this kind of scenario the plugin could be pre-installed for them so that they would be exposed to security best practices early on.