Right. I said exactly this. Current version does not support replication of plugins access restriction for the whole network.
I can not explain a reason why, though. It seems, that it’s a bug, which prevents including “Plugins activation access” add-on to the list of add-ons available for network replication. I will investigate it and try to fix with the next update.
With current version you need set restrictions for every subsite manually.