In reply to James Laws.

I think this is the best policy - bugs do happen and as projects get bigger and bigger it's becomes harder and harder to pentest every nook and cranny. What makes a great plugin is communication from the developers and quick response time.