The writing and perhaps messenger isn't the best :| It's describing people wanting to use VMs for sandboxed development but opening themselves up to risk from the remote machine due to the VSCode SSH Agent protocol allowing the remote server undue access to the local development machine.