FYI, you do lose a small amount of security using vscode remote dev. For example, if the dev server is compromised, vscode offers an api to request the client's

FYI, you do lose a small amount of security using vscode remote dev. For example, if the dev server is compromised, vscode offers an api to request the client's clipboard, which may contain sensitive information. If you're using a password manager + browser extension, that does mitigate it quite a bit! It's also possible the remote/local extension API has other issues since it offers a much broader attack surface than, say, just ssh + vim. Clipboards are one of the several security knobs it's hard to get just right when adding layers of security to desktop apps. Qubes does this by having separate clipboards, and requiring specific global hotkeys to move clipboard contents between specific containers [0]. [0]: https://www.qubes-os.org/doc/copy-paste/ https://www.qubes-os.org/doc/copy-paste/