AI Code Editors and Security

I am wondering does all software companies allow their employees to use AI code editors like
Cursor, Windsurf, VS Code + Copilot, Webstorm AI?
Myself currently I am on the fence for using AI Editors at Work, I only use Cursor for my own project
Because I think it could potentially expose a risk for the company

What if there is a Supply Chain Vulnerability and one of those editors sends an update that could steal your corporate credentials?

Do you guys think a product that will specifically work as a plugin for VS Code to protect "marked" files from AI, will be useful?
Do you currently use AI Editors at your workplace?