The type and destination of the network request would be useful to block/allow as necessary, ala little snitch. However, IMHO AV software should be reviewed as

The type and destination of the network request would be useful to block/allow as necessary, ala little snitch. However, IMHO AV software should be reviewed as such. They clearly didn’t do this. What is the point of the app store? It seems to be a proxy into sandboxing, but it’s hardly useful if there’s no review that the sandbox is effective, and the sandboxing would be more useful decoupled from the app store so that you can sandbox arbitrary apps. If the controls are there, it’s not obvious.