I don't see that as much of a security risk as the person would very soon find out from the people they chat to, when installing scripts people are warned for a reason.
I'm also quite aware that it would only work if both parties have the script/plus installed. Is there any way to get this as a request on the next version?
