There's documentation available to disable plugins and scripts by passing the appropriate command line options: --no-plugins --no-scripts. Unfortunately, there's no (documented) way to make that the default via the global configuration.

Please add a configuration option to disable scripts and / or plugins globally.