[Animats]

"Network" is too broad. What you really want for most apps is "can only talk to its home domain from which it was downloaded".

[velocity3230]

Then they'll just set up a proxy on their home domain.