“Unlike Tramp, which lives off the land on the remote connection, VSCode mounts a full-scale invasion: it runs a Bash snippet stager that downloads an agent, including a binary installation of Node.”

Fly.io blog · Fly.io details VSCode SSH agent architecture, security tradeoffs

“I would be a little nervous about letting people VSCode-remote-edit stuff on dev servers, and apoplectic if that happened during an incident on something in production.”

Fly.io blog · Fly.io details VSCode SSH agent architecture, security tradeoffs