When the political environment becomes unstable, people need to reach out to communities that they trust. For some people, here is where they are comfortable, and where they meet people whose character is legible enough to them that they can place trust. By saying "no politics here" you're denying the people who find this their safe space the ability to share their fears about the situation.
IMO the main difference between the current US administration and those usually considered authoritarian, is that it does not yet use violence to discipline it's own side. But if it remains, that is an unavoidable step on the roadmap. It's supporters are acting like democracy and the rule of law can be denied to some people, while they retain them; that is not a sustainable state of affairs. "Business as usual" is short-sighted.
* The definitions of security config in the documentation of settings.json are unclear. Since it's not open source, you can't check the ground truth.
* The built in constructs are insufficient to do fully whitelist based access control (It might be possible with a custom hook).
* Security related issues go unanswered in the repo, and are automatically closed.
Haven't looked into copilot as much but didn't look great either. Seems like the vendors don't have the incentives to do this properly.
So I'm on the lookout for a better way, and matchlock seems like a contender.