VS Code goes weekly, gets AI autopilot - what could go wrong

Microsoft is moving VS Code to a weekly release cycle and introducing an Autopilot mode for Copilot Chat, which auto-approves all AI agent tool calls, auto-retries errors, and auto-answers tool prompts without user intervention. Security concerns are raised: auto-approval removes a key protection against prompt injection and MCP tool poisoning. Terminal sandboxing is recommended but only works on macOS and Linux. Google similarly launched Auto Approve Mode in Gemini Code Assist, while its own documentation explicitly warns the feature is 'extremely dangerous and never recommended,' creating a contradictory message between its blog promotion and safety docs.