VSCode has these same threats, but is just a little more subtle/slow-moving about it.
I'm not actually familiar with the issues that VSCode has but I seem to recall some key component was not OSS, but I forget the details there and maybe it has changed. I know it has telemetry and such, but AFAICT that can be disabled by some settings. (I personally use vscode for my own work and disable telemetry and don't use any code assistant platforms, and I would like to know if there is a problem with what I'm doing)
IOW, frog being boiled slowly.