Breakage is the best-case scenario. Mass data exfiltration is the bigger concern. The community plugin system is both an unacceptable security risk, and a necessary part of achieving even a baseline level of usability. Imagine the scale of theft that must already have taken place.. the targets may never even know. The fact that Obsidian falsely claims to audit this cesspool is hilarious.

It is an hilarious claim. They don’t have enough resources to implement critical features, much less waste developer time auditing every random Tom, Dick, or Harry plugin contribution.