[semi-extrinsic]

How do you run an email app in a secure sandbox to prevent data exfiltration? The app's primary purpose is to send and receive data.