While reviewing MDL-35716 (see comments) - i realised that we've got reports that help to optimise security and performance now for moodle core. This needs to be extended to allow plugins to report the same information.
Allow plugins to add security checks
Create performance report page showing warning, which can potentially affect performance.
Create a Check API