It must be possible to "switch on/off" plugins on the fly.
Plugins need to have a "switch" (meaning a state flag in the database) where it can be turned on or off. When turned off, all ExtensionPoints must ignore the plugin's implementations.
Should be an easy task to do, but this must be very sensible, as it could lead to serious security flaws if not implemented correctly.