So? It's a text editor. It's not like it's dependent on continued uptime of cloud services to function...
Even text editors can have security vulnerabilities that allow privilege escalation. Especially if they support plugins which this does.
To each their own, but I wouldn't risk it.
It is common for build time or runtime dependencies to change in incompatible ways meaning eventually you might not even be able to run it or even built it from source.
a dependency change is no longer an author's problem when they have pinned down versions.
Pinning can be problematic since it blocks security updates.
> It's a text editor.
It's a code editor. Without Language Server support.