Ima have to add some sort of plugin blacklist to future WordPress sites. The ones I’ll be hosting, at least.
Also: https://wpengine.com/support/disallowed-plugins/ & https://nl.godaddy.com/help/verboden-plug-ins-8964
I like how WP Engine disables revisions by default, too. (I was previously given control of a couple sites with many thousands of revisions each.) https://wpengine.com/support/platform-settings/#revisions
@jan wouldn’t whitelisting be better? There’s so. much. crap in the WP ecosystem…