Are custom plugins secure?