In reply to Jon.

I'd love to see a policy where any plugin that is removed due to a vulnerability issue is not made available again until it goes through a complete security audit.