https://madebyevan.com/figma/an-update-on-plugin-security/