fix(plugin-security): enforce both declared write-wideners; the platform baseline becomes explicit-allow (#5492, #5491)

fix(plugin-security): enforce both declared write-wideners; the platform baseline becomes explicit-allow (#5492, #5491) #2169