i.e. server-side modifications are unaffected by safe mode (if not explicitly handled by the plugin)
A PR to core would always be better than a plugin! But security-wise, it wouldn’t matter much.
I looked at the PR and don’t understand why it wasn’t merged either…? @featheredtoast ?