ShaniOS maintains two separate environments. If an update - or anything - goes wrong with one environment, simply reboot and switch to the other.
Attackers can abuse VS Code configuration files for RCE when a GitHub Codespaces user opens a repository or pull request.