I found very interesting article from Google Chrome about multiprocess, and how every plugin is in separate process. In this way it is possible to make plugin more safety. it is possible to kill process safety!
I am 100% for this approach! Whenever I was thinking about safe plugin architecture, I have always ended with something like this.
The only problem is how to achieve effective and maintainable communication between both process. And how to use that to do GUI...