Xenforo itself is quite secure, much more secure than most other forum software. By installing a third party plugin you are essentially giving your house keys to an unknown person and trust them that they will not do anything malicious.
Giving granular permissions like mobile apps is not applicable.