It would be great if we could filter for plugins from developers with good security track records. No need to name and shame the bad ones, just provide an option to avoid them.