Are you talking about this? https://code.visualstudio.com/docs/editor/workspace-trust That's different from how virus scanners work and not exactly what I'm talking about. Even Emacs does that.

That is different, vscode finally realized most people don't want stuxnet-class implicit autorun behaviour from random files and folders in your system.