I think your ‘5 cents worth’ is incorrect and unhelpful.
Just because a plugin – or some piece of code – is not updated does not automatically qualify it for being “an easy target for hackers”.
Whilst your point may have some validity, just because there is a more recent version of a similar piece of code does not mean it is immune.
This plugin’s code is fairly unobtrusive and not complex, uses standard wp code, hooks and filters and does not use any deprecated code (that I can see). I’ve used it for a number of years without issue.
So on balance I think there is nothing to worry about here. Unless you can substantiate your claims by showing something in the code that makes it vulnerable, I don’t think this kind of scare mongering is very helpful.