Strongly agree here. VS Code extensions with the audacity to download and execute random binaries are particularly pleasant on my NixOS system, where these binaries simply don't work.
I am fine with this behavior as long as I can disable it. Yes, I also use NixOS and don't like when things download random binaries, but I can understand there is demand for things that just work TM.