* Update the rules over HTTPS, not HTTP
* Filter preferences should show the typo-correction-rule URL, just as it does for ad-blocking rules, and it should be possible to inspect them by clicking
* typo correction should probably only be used if the target website doesn't actually exist. See elsewhere in the comments, that is what how one would normally expect it to work.
As it is now the fact that typo correction even uses an insecure, remote list of rules is not at all obvious from the UI, instead its hidden away in the code.
Of course its also a bit confusing on why typo correction is even part of AdBlock Plus to begin with, as there is another extension just for that purpose - urlfixer. If someone wants typo correction you could suggest them to also install urlfixer, but it doesn't really make sense to have two unrelated features in one extension. Don't try to become an extension that does everything...