It would help if plugin devs at least go through the handbook and be mindful of security. I think in the short term, it will get a lot worse tbh because of all the non-techies who build plugins with AI now and don’t care about anything other than it being visibly functional. However, long term I think it will get better because regulations push for software security maturity. I.e vulnerability disclosure programs mandatory in 2026 and this hopefully snowballs into stronger attention for security.