VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain AttacksHow will attacks be found in these two hours if the people who may notice will get the update later, like anyone else? "But Volpeon, this gives Microsoft time to find these attacks" Okay, why not switch to an approval model then?
