Any random program running as user X, if malicious, can do far worse things to the user than install plugins into the browser.

Apparently the major browser vendors' solution to the problem of things running as users breaking the browser is to remove the ability for users to do things. This is a bogus solution.

See: Firefox's chrome-ification of the plugin system.