Hi,
We did not uninstall plugins which were not included anymore. That way for people using them, it would still work seamlessly when updating their HikaShop.
You don't need the plugin if you're not using it.
In that case, you can just uninstall it.
They don't pose a security risk as no security issue has been found in them so far.
If you're worried and you want to look further into it, you can look at the date of the plugins. All the plugins included in the current version of hikaShop have the same date as HikaShop. Other plugins (specially the ones in the groups "hikashop", "hikashoppayment" and "hikashopshipping") have either been installed manually on your end, or are old plugins not included in HikaShop anymore. So check their date. If they are several years old, then either you can update them if you're using them, or remove them.