VSCodium avoids this entire issue. It is a community-driven option for those who don't want the proprietary distribution ...
Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...