> This... doesn't feel responsible. there are 3 parties involved here: 1. the developers who wrote the p.o.c 2. m$ which provides the 'ecosystem', and 3

> This... doesn't feel responsible. there are 3 parties involved here: 1. the developers who wrote the p.o.c 2. m$ which provides the 'ecosystem', and 3. the end user _i_ would put #2 way above #1 in the lack-of-responsibility department. for example, see: https://github.com/microsoft/vscode/issues/52116 https://github.com/microsoft/vscode/issues/52116 for some more information, it is definitely not an unknown attack vector.