> Sure, but that's at least an additional piece of security, requiring additional work to bypass. I would not consider the ability to proxy traffic much of a n

> Sure, but that's at least an additional piece of security, requiring additional work to bypass. I would not consider the ability to proxy traffic much of a new capability for attackers. You can do it trivially with a single SSH command. Even a script kiddy with automated tooling should be able to handle this. Agree that detecting exfil when you have sensitive data is very important though. Just that it takes a lot of work to protect against, and a ton of work to detect.