The idea is to slow them down and make it harder. We don't have the time, resources, or expertise to examine every plugin which is precisely why we don't host or provide binaries for external plugins.
282 karma · joined January 22, 2014
If there's something we're missing, please let me know!
That said, the vulnerabilities in "libpurple" were way over hyped by someone who rightfully got kicked out of the security community. Most of those vulnerabilities were in fact in protocol implementations that are plug-ins to libpurple and not libpurple itself. I know it's a technicality, but hearing this blatant lie get repeated for over a decade is exhausting.
I have a public blog post on my patreon that goes into some more detail if you're interested. https://www.patreon.com/posts/what-were-with-3-78291546
See this page for a list of all the third party protocol support https://pidgin.im/plugins/?publisher=all&query=&type=Protoco...