Consider that often, far too often, a hierarchically senior non-tech individual mandates that various plugins be installed, without security checks or plugins that fail security checks, but that manager/c-suite individual demands the change. Far too often.