If your plugin allows users to submit data—be it on the Admin or the Public side—it should check for User Capabilities.
You may also like
Devs: Give your feedback on Plugin Directory Playground Previews
Devs: Give your feedback on Plugin Directory...