with magma? simply? well, you can, I exploited magma, it's not really gsp safe, you can get the server files with it (I didn't do that, but I could), but I wouldn't say it is simple (not for the magma plugin devs)
I think all c# plugin should run in it's own appdomain, so it could be restricted...