Since OpenSearch 2.17, the security plugin has been conscious of the SystemIndexRegistry in OpenSearch core which is composed of all of the indices declared across all SystemIndexPlugins.
A plugin utilizing a system index will extend SystemIndexPlugin and declare system indices with SystemIndexPlugin.getSystemIndexDescriptors()
I propose deprecating plugins.security.system_indices.indices to discourage any plugin from further adding to the manually tracked list here now that we are able to get the registry programatically.