Except for few language related extensions, I don't have any other extensions on Zed. Which means I worry less about which of those extensions will be sold off to a malware developer.
I had more issues with official extensions on VSCode (looking at you flutter) than not having any extension on Zed and having to rely on the terminal (which feels much closer to the system than it did on VSCode).