I'll take the opportunity to self plug: I've been working on a solution to help bridge this gap of having to blindly trust VSCode extensions, planning to eventually also release it as open source
You're welcome to sign up for early access at https://coderguard.io/
As I'm currently mainly looking for user feedback