My solution to the plug-in problem (not Thunderbird specific) is to not install Flash/Java RE/Silverlight on my machine at all. Not that that helps you here, but I do wonder why more people don't just remove such software.
As it happens, on the machine in question I have valid reasons for needing all of the above at times, hence their presence in Firefox but with activation on demand only.
But I have eight plug-ins installed in Thunderbird, and some of them I don't even know what they do. Why does Google need an update plug-in that I never requested or gave permission for to be installed in Firefox and Thunderbird?