Yes indeed, we've also chosen to go the path of shared lib as plugin approach. Size does matter, having cargo be aware of this helps greatly.
Side note, do any of your plugins pull in OS level deps like openssl? Do you run out of initial-exec TLS variables? If so, how do you deal with it? (please answer specifically on this topic Initial-exec TLS variables )