I do not see much difference between 'application' and 'plugin'. Both are just some code one installs one on one's computer that somehow work together. There is risk that plugin does 'rm -rf ~/', but the same risk is for the application, both are mitigated through distribution infrastructure. So i do not see why application should have any kind of responsibility for plugins.