We can also enforce those kinds of privacy issues with graph rules, which we shouldn't expect users to be doing for their loose source plugins