Got it, if that's the only way..
Maybe the suggestion for feature release, we can define the required class and function name in Universal Module interface, just like built-in rules. Then the code will load required file/class and invoke the function for validation. So the 3rd party just need to maintain the validation part only..