Yeah, there should be a way to approve any requests that are made to plugins.
When writing my toy "chatgpt with tools like the terminal" desktop chat app cuttlefish[0] I had a similar situation where access to the local terminal is very fun, but without the ability to approve each and every command executed its really risky.
(Which is basically what I ended up doing - adding a little popup you need to click every time it wants to use the given tool, if you enable it - details in the readme)
It's not like there's a technical challenge here, while a lot of plugins are unusable without it.