Why VS Code Workspace Trust Does Not Stop a Malicious Theme Extension

GlassWorm's fake VS Code theme extensions show why Workspace Trust alone cannot prevent malicious IDE extensions from compromising developer environments.