A lively Hacker News debate erupted after Jamf Threat Labs uncovered repo-based attack vectors. A VS Code team member argued that Workspace Trust remains the key defense, even as UX friction tempts users to bypass warnings — a reminder that security design is only as strong as user patience.