I've never considered security when installing VSCode extns other than common sense check (e.g. prefer verified developer ✅, reasonable number of downloads / rating).
I have 61 extensions, about 1/3 are disabled. I managed to uninstall ~10 this morning, but I think I'd genuinely miss the rest.
How many do other people have?