@baldur
I mean, vs code is a Microsoft product. They don't care about security any more than they absolutely have to...