Which you are only allowed to do if you use Microsoft's build of VSCode. The ecosystem of that is deliberately closed off.

This event kind of makes that seem justified, no?

As far as their bottom line and market control while openwashing, sure. As far as improving the security of the ecosystem as a whole, no.

See https://ghuntley.com/fracture/, for a criticism of this strategy

Not really, no.