I am worried about a lot of common functionality in VSCode/Atom, from keyboard bindings to support for more languages, being implemented by 3rd party plugins. They are updated independently, without verification, and have full code execution and network access (and things like independent telemetry).

Am I alone in this? Are there security features that I'm missing to guarantee that my code editor isn't leaking information in 20 different directions?