[rat9988]

Then why should end users expect anything? Microsoft is already paying for developpers.

[wildzzz]

Then they can pay those developers to sandbox vscode extensions at the very least. I like using vscode sometimes but I'm sure as shit not going to use it if my work bans installing extensions due to security risks.