What is a plugin frameworks resposibility to prevent unwanted execution?
If one were to create, or use a pre-made, plugin framework, what would prevent a plugin author from executing malicious code or even a seperate program? 
Isn't this kind of what happened with dll hijacking?
Is it the plugin frameworks (or containing applications) responsibility to prevent this, or is it a "buyer beware" scenario? 

What is a plugin frameworks resposibility to prevent unwanted execution?
===

If one were to create, or use a pre-made, plugin framework, what would prevent a plugin author from executing malicious code or even a seperate program? 
Isn't this kind of what happened with dll hijacking?
Is it the plugin frameworks (or containing applications) responsibility to prevent this, or is it a "buyer beware" scenario? 
