Hacker News Reader

Microsoft (claims) does that already. Their pitch is for people to use the main VSCode marketplace.

Which you are only allowed to do if you use Microsoft's build of VSCode. The ecosystem of that is deliberately closed off.

This event kind of makes that seem justified, no?

Not really, no.

As far as their bottom line and market control while openwashing, sure. As far as improving the security of the ecosystem as a whole, no.

See https://ghuntley.com/fracture/, for a criticism of this strategy