Plugin security is one thing. Plugin budget is another thing... much larger of a problem in some cases.