The cynic in me thinks that their real plan is just to add monetisation and or implement/sell features that already exist in modified clients and that "security" is a convenient excuse.
emmVRC, a hugely popular legitimate mod (referred to as a "wholesome" mod by the community), used to have this feature, but removed it an implored their users to support VRChat instead if they wanted it. Other more gray-area mods still have it.