It’s a functional "last resort." If you have an older DVR, it’s a necessary evil, but most users would be better off migrating to a dedicated mobile app (like XMEye) or updated VMS software that doesn't rely on 20-year-old browser tech.
No plugin. No browser. No malware risk.