Comment by skue

Had similar concerns, but just noticed they seem to be taking this more seriously now: https://zed.dev/blog/secure-by-default