If malicious code ends up in your $PATH you have much bigger problems than git having a seamless plugin architecture.