Comment by pjmlp

The only way to have secure plugins is sandboxed processes using OS IPC mechanisms, anything less subjects either the host application or $HOME to possible exploits.

Unfortunately only mobile OSes are on the forefront of this.