There's a big difference between max access and giving permission to run a specific binary which itself has no restrictions.

The difference does matter less when the binary and plugin are produced by the same group or individual though.