I don't know how adequate such vetting is. It puts the onus on the developers to look at the results and decide. Is there work being done to sandbox extensions?
but it will still leave all the vscode.* APIs open, so extensions can still do things like read any file in the filesystem, or run programs like they do today
it's a start and an important step, but definitely not a cure-all