Plug-In security concerns