In reply to nick6352683.

The white paper actually covers the security implications of plugins and themes and exactly how we handle such issues. You should read it.