> ~40 extensions Devs with this many extensions are an OpSec/data governance nightmare! VSCode desperately needs some sort of access policy/permission system

> ~40 extensions Devs with this many extensions are an OpSec/data governance nightmare! VSCode desperately needs some sort of access policy/permission system for their extensions, and make it more obvious when an extension phones home code or other data its user doesn't directly provide it with. Copilot, for example, straight up sends and uses your code - not just the modifications you've made to the laundered code it provides you with, but any or all of it [1]. 1 https://docs.github.com/en/github/copilot/telemetry-terms https://docs.github.com/en/github/copilot/telemetry-terms