It's been a while, but what struck me about Wordpress plugins is how many have almost no value add over the "manual" way, even ignoring the security aspect. Like wrappers around Stripe.