But what about VScode?

Do you hear the VSCode team talk about supply chain security?