I really ditched now VScode/Cursor after the extension vulnerability (beside I never used that, only the Claude code CLI).
Despite no using full VM's I using Orbstack Isolated machines to some level of restrictions https://docs.orbstack.dev/machines/isolated for coding.