OK. Btw., just take into account that person who install a plugin, can execute on a server any PHP code (if include it into plugin) and receive this way full access to the site and its data (if he has such purpose). URE restrictions protect only WordPress user interface.
