Comment by TimTheTinker

Never trust a binary more than you trust the person who built it and the channel you downloaded it through.

A better method might be to fork VSCode’s repo and modify the build scripts and/or code to remove telemetry.