VS Code is slowly becoming an operating system, and I’m not sure that’s a good thing
… Security research backs this up. Studies show that VS Code extensions aren’t sandboxed and can introduce real vulnerabilities, including code execution risks in widely used extensions. Many also depend on large dependency trees, which adds more supply chain exposure. …