Since osquery makes the Unix socket / named pipe, the extension developers can be pretty frivolous so long as the plugin itself doesn’t expose a new api or change the permissions on the socket