One can ssh into untrusted remote host with little risk for local machine security. That is, if the remote site is compromised one cannot use it general to comp

One can ssh into untrusted remote host with little risk for local machine security. That is, if the remote site is compromised one cannot use it general to compromise the local machine. At best the attacker can try to exploit bugs in terminal escape sequence handlings or rendering of complex Unicode characters by the local terminal. This is a relatively small attack surface. With vscode that exposes the local machine to the remote with support of very complex and undocumented protocol it is entirely different story. Which is a pity especially given that VScode is browser-based and browsers are designed to allow connections to untrusted servers. I suppose it will be a different story if VScode was designed with remote editing capabilities and treated the local stuff not different from remote. But given that the ssh extension was brought as an after thought with little regards for the local security we have the present unfortunate situation.