[rorykoehler]

I saw this type of thing coming a mile away and left GitHub as soon as they were bought by Microsoft. TBH even despite my inherent distrust of Microsoft this is way beyond the hypotheticals I had in mind when I deleted all content from my GitHub account. Now I’m worried about VSCode as another potential vulnerability vector. Has anyone done a recent independent audit of what is sent across the wire to Microsoft from VSCode?

[belter]

Well they have Telemetry enabled by default so you should disable it:

https://code.visualstudio.com/docs/getstarted/telemetry#:~:t....

Maybe something else still goes over the wire...