[qwertox]

VS Code is pretty cool, and when I use it -- I have it open right now --, I mostly enjoy it.

But I'm very concerned about the security of the extensions. They are so great, they are what makes VS Code the great tool that it is, but I fear that it will soon have the same problems npm has.

Are there any kind of protections in place which prevent an extension developer to sell his extension or he/she itself go rouge and siphon out the code being edited, or the entire project being worked on, or even install malware on the machine?