I’m guessing the same reason as browser extensions get sold - remote code execution on a bunch of people’s computers for something they wouldn’t volunteer for. Displaying ads, exploiting data leaks to plugins that might exist in VSCode, waiting for a zero day in electron to drop without a patch, something miserable.
