Shoutbox

But plugins already have access to incoming text:

* sText: the rest of the received message. You can use it to get more information about the action you want to perform.

so it could still gather info and phone home with it now.. the only malicious thing i can think of would be to alter an incoming message in such a way as to make the user recieving it give out some kind of personal info.. But i doubt someone would give out there password/credit card number to someone on there mess list etc.. and with functions such as:

sTextToSend:this parameter is optional. You can use it if you want to ask Messenger Plus! to send a new message after this one has been displayed. This WON'T modify the message  associated with the notify code, this will simply send a new one.

Isnt that already insecure? You could have a plugin that opens a backdoor or sends out an ip when a particular message is recieved. I agree that not everyone is completely ethical about stuff like this but i really dont see how this would make much difference to security.

RooJ