Steps to Reproduce:

1. Install VsCode .deb 1.10
2. Check apt-key list, find Microsoft key in trusted list
3. Check /etc/apt/sources.list.d/ find vscode.list in directory

Having the software stay up to date is great, and I would likely install the repository manually, but, the audacity to add a repo to my apt lists and a trusted key without my permission, or any indication that it has been done is utterly abhorrent.

I suggest a prompt for permission to add such key and repository is presented to the user, as the current method is an abuse. I have no ability to install the deb without providing root/sudo permission, and hi-jacking that permission to also add these to my system without permission or notification is exactly the underhanded behavior I expect from Microsoft products.