What’s the attack vector? Someone with ssh access to your machine can run code on your machine? That’s part of ssh.

Presumably the attack vector is that someone malicious at Zed or VSCode could change the code in the server components to introduce a backdoor that could be used later.