Is it a standard to have an empty `index.php` in root of Plugin? [duplicate]

It helps to prevent the contents of the plugins folder from being listed if someone was to browse to it. So, yes, it does provide a form of security.

If someone browses to the plugin folder with their web browser, it will just display a blank page instead of a directory listing.