CodeRisk of plugin

Hello,
I am thinking about your plugin but the security risk is very high.
Have you heard of
https://coderisk.com/wp/plugin/all-in-one-favicon

I see lots of Directory Traversal on my website where they try to get to the config files and I do not want your plugin to be one of them.

Here an example which is not your plugin:
https://…/wp-content/plugins/abc-plugin/admin/import-export/download-content.php?file=..%2F..%2F..%2F..%2F..%2Fwp-config.php

thanks for looking into this.