You can never be sure what a plugin does. Also the "write everywhere" could be achieved by writing the file to an accessible directory and then using the ags_shell plugin to copy it to the final location. Since that plugin can run any command it is already such a big security risk that the risk added with this plugin wouldn't matter imho.
E: If run with standard user permissions, the plugin should not be able to destroy the operating system. Destroying user data is possible of course.
E: If run with standard user permissions, the plugin should not be able to destroy the operating system. Destroying user data is possible of course.