It doesn’t take much to tamper data when you use HTML forms; you don’t even need a plug-in to do that. That’s inherent in all HTML forms.
If you’re that worried about people tampering with your data, yes, you’ll need to rewrite the plug-in code to use session variables or a digital signature.