Doesn't this give OpenAI access to your source code?
However, OpenAI pinky promises they don't use API data for anything, like training. Maybe that makes you feel a bit safer, although probably it shouldn't.
So I think we shouldn't trust them that much.
It doesn't. I don't trust OpenAI or Sama. Frankly, I'm even hesitant to use VSCode now, even with its customizable privacy/telemetry settings (though I can at least limit its network access).
But not your entire codebase.
Depending on your company thay may or may not be a showstopper.