WordPress file manager plugins are safe to use as long as you use them correctly. That piece in Ars Technica from earlier in 2020 was a wakeup call. The vast majority of plugins won’t be susceptible to weaknesses like this but it makes sense to check reviews and look at feedback before committing to one.