Yeah, Plugins can be an issue because they are mostly community maintained, and a lot of them are one-offs. Like any other dependency, you have to be careful, what you depend on, if you don't want to end up maintaining it, in the case the maintainer goes away.

You hit the nail on the head. This could just as easily happen with a Spring Boot "starter" or even an OS-level update. The challenge is finding the trade-off for what you want to maintain and what you want to rely on others to maintain.