I vote for it and i would code it.
But it won’t get integrated into to sponge i guess. IIRC they said they won’t include stuff like this cause of security.
I could image to exactly this, but i want to eliminate the possibility of malicious code or at least lower it. With some kind of permission based system like Android does. To achieve this, the only way i can see, is that client mods have to be written in JavaScript or some other scripting language and may we kill away the java references, so you can’t get every class you want, but instead provide them over a special class which will get exposed to the script context if the permissions are needed.
Just a small way i could think of how to do it