Extend Feature Request

[shawn_a]

seems kind of risky, someone could take over a well trusted plugin and insert malicious code.
It not like there is a code review process as with open source projects.

Collaborators would be chosen by plugin author. Someone can just as easily create their own plugin and insert malicious code.

True but the effects of an update to a well established and highly used plugin is much more riskier, most new plugins get vetted by the community in forums, updates not as much, plus a large user base.