[insanitybit]

Sufficient for what? It's sufficient for preventing an extension from accessing tokens on my filesystem, from connecting to arbitrary networks, stealing my browser session cookies, etc. It's sufficient for a fucking lot.

This is how browsers have been doing things for 20 years, it's ridiculous that a company worth billions isn't doing it.

[gchamonlive]

Don't know what you are talking about, browser extensions implement granular permissions on top of sandboxing too.

https://developer.chrome.com/docs/extensions/reference/permi... https://support.mozilla.org/en-US/kb/manage-optional-permiss...

[insanitybit]

Perhaps I was unclear. I am suggesting exactly that browsers do this correctly and that vscode should be following that old, tried and true model.