It isn't just malware installing plugins, it is the plugins increasing the attack surface for people trying to use the browser to install malware.