Plugins are code that runs alongside Discourse. It is not a problem for the bot to have any permissions, from Admin to TL0, because in fact it is just an object of code operations, and it has unlimited permissions.
In fact I have now finished developing this part of the plugin. But I’d be wary of publishing this plugin to Customization > Plugin given the more catastrophic consequences if a plugin (rather than theme component) goes wrong.
I will release it officially after the plugin is launched on my forum and after a period of verification.