BTW - I don't see this as a vulnerability. It is (clearly) by design, just something to be cautious with for all the vibe coders out there :)
The @vscode.dev is doing an excellent job here - they even disable Copilot entirely in untrusted (restricted) workspaces.