You are right, we don't allow plugins on WordPress.com for security reasons. Plugins are a feature only available for self-hosted blogs provided through WordPress.org. For more information, please see:
http://support.wordpress.com/plugins/
For more information on the differences between WordPress.com and WordPress.org, please see: http://support.wordpress.com/com-vs-org/