Ah, now I realize where the Malicious Software ban was coming from -- as you say, there was no plugin that could actually be malware-scanned. Makes sense. Thanks for the (perhaps obvious but not to me) insight.