[cmroanirgo]

I'd go as far as requiring a statement of intent (soi) from developers requesting network access, describing the frequency and payload content and size. If the code doesn't match the soi then the app is crippled.