Comment by ApolloFortyNine

2 days ago

I don't know when Obsidian gathered the hate I'm seeing here, but 'bad plugins' is a failure mode of most everything that has plugins.

Personally it feels similar to being mad at Windows if you were to install an exe someone emailed you and it turned out to be a virus.

You can install bad chrome plugins, bad wow addons, basically anything that's purpose is to run user code can be used to run bad code.

Personally I'm glad the _note taking app_ prioritized allowing for custom plugins over pushing back features so they could spend an extra year locking down user plugins. They can put some additional effort in but running unknown code will always be a risk.

There is no architectural limitation that makes it impossible for a plugin to not have full filesystem access.

The fact that creating a good plugin system is difficult does not give them a free pass to not implement a good one, it is a for profit company that has a considerable revenue.