WHat about Positron/Cursor, both built on VScode and use all their extensions? Are they inherently assuming this flaw? Further - how does this affect Copilot

WHat about Positron/Cursor, both built on VScode and use all their extensions? Are they inherently assuming this flaw? Further - how does this affect Copilot addon to both, such as the Cursor's ability to connect OpenAI / Claude APIs?