Actually if you have plugins laying around that you're not using you may want to delete them if you don't want to update them. As far as I know even deactivated plugins can be exploited.