Okay. But I have more than one project. And sometimes, I want to use my IDE to open /tmp/foo.json that I just curled out.
I feel that users like me are far more prevalent than users who want to rigorously audit every path the IDE may want to open.
I feel that users like me are far more prevalent than users who want to rigorously audit every path the IDE may want to open.
Vscode on snap runs unconfined for example, that's explicit