[jimrandomh]

Browser plugins that access your email are a very-high-risk category for malware, so much so that if I see an ad for one I wouldn't personally give it the benefit of the doubt. Combine that with A/B testing for different product ideas, and the clickthrough experience not actually ending in a plugin which can be malware-scanned, and rejecting it under the "circumventing systems policy" seems correct to me. The reviewer can't distinguish between "the plugin was not served because this is a fake test for a product that doesn't exist", and "the plugin was not served because the malware doesn't want to send a sample of itself to the reviewer".

[lstepanek]

Ah, now I realize where the Malicious Software ban was coming from -- as you say, there was no plugin that could actually be malware-scanned. Makes sense. Thanks for the (perhaps obvious but not to me) insight.