I guess you are right. I would buy it from the developers but just can't afford it at the minuteIf guess if they're charging you money, the risk of a plugin having malicious code gets minimized, but the risk will always be there unless you buy it directly from the developers.