You can sandbox your application when it runs, but nobody's doing much about the dev environment. If you're working for a company and using VSCode, you are ofte

You can sandbox your application when it runs, but nobody's doing much about the dev environment. If you're working for a company and using VSCode, you are often just one malicious plugin update away from leaking the company's IP and/or having your system compromised. Similar case for Python packages and such Internet-facing code environments.