>>394722891
Half of the people using mods have never written a single line of code in their lives, and I was mostly thinking of mods that update with the auto-updater. It's easy to undermine the room temperature IQ gorillas that download the sketchiest of clients as a minority and a group stupid enough to deserve their money stolen but there are a lot more of these people than most would think, most likely some of your friends would fall for the same things, seen how many /vrg/ people get their discord accounts hijacked to this day.
If the world was perfect and there were no bad actors, or if everyone had the time and knowledge to read open source code keeping mods unmoderated would have been a no-brainer. But I can totally see why VRC chose to nuke all mods instead. It won't destroy all malicious clients, but severely reduces the amount of access to these clients and also reduces people making and updating them.
Personally I'd say the ideal solution would have been to create a steam workshop type of thing where people can upload whitelisted mods and are somehow legally liable to not fuck them up with malware with updates.