If you are lie in a bed and open a gui with a command, you can take out all items from the gui in your own inventory! 

This is not a plugin issue, this is a spigot issue in my opinion because it concerns every single plugin!