VS Code does not just add imports to your code. I switched away from VSC when I found out the official Python extension (which you basically have to use to get

VS Code does not just add imports to your code. I switched away from VSC when I found out the official Python extension (which you basically have to use to get things done) automatically installs things like Python 3 typings—ordinary modules, completely unvetted (e.g., typings for Django are maintained by a random guy who last time I used it had nothing to do with Django core team) and installed from PyPI (which totally did not have an avalanche of packages with embedded malware just recently)—and has no option to disable this.