WARNING: Global themes and widgets created by 3rd party developers for Plasma can and will run arbitrary code. You are encouraged to exercise extreme caution when using these products.
A user has had a bad experience installing a global theme on Plasma and lost personal data.
Global themes change the look of Plasma, but also the behavior. To do this they run code, and this code can be faulty, as in the case mentioned above. The same goes for widgets and plasmoids.
@kde Would removing the downloader from KDE/only showing verified plugins work? I know that there are warnings displayed on download right now, but I think most users (including me) are used to thinking that apps from the system built-in app store are implicitly quite safe :)
@kde You could still download them from the website (preferably unofficially-looking, something like "kdeaddons.tld"), but that implies that it may not be safe - same as with any other random software from the internet
