It's the other way around: the post is saying that the remote VSCode agent can tell the client to just do whatever. That's not how SSH usually works, if an SSH server can pwn a client that's a bug.
I think it's only necessary because extensions may need to run client side. Not sure if that means the extension needs to be published on their marketplace site.
