Various settings are `restricted` in the codebase to only use them when the workspace is trusted. `allowAutomaticTasks` is one such setting: https://github.com/

Various settings are `restricted` in the codebase to only use them when the workspace is trusted. `allowAutomaticTasks` is one such setting: https://github.com/microsoft/vscode/blob/f7730c409e14af94d75ba79fe2df96beda1b0cbd/src/vs/workbench/contrib/tasks/browser/task.contribution.ts#L546 https://github.com/microsoft/vscode/blob/f7730c409e14af94d75... So a malicious repo can easily override it... if you say you trust it.