If your organization doesn’t manage extensions and your users can freely install any browser and VSCode addons, you have an unmanaged code execution surface running with potentially elevated trust on your devices. The GitHub breach last month is just the latest proof...