[roughly]

In the age of vibe-generated code, I promise you're gonna want the safety.

[CuriouslyC]

So load them up in read replicas

[echelon]

You have to have a write path. You're gonna want what to be non-sketchy and performant.

[noworriesnate]

Or use webassembly to sandbox them

[wtetzner]

What about just not installing sketchy extensions?

[throwitaway222]

I know right? Postgres is not firefox, we don't operate with 25 extensions on all the time. At most we have 1 and normally we have 0.