> how are you actually supposed to inspect them if you have a legitimate reason? By shoving your middlebox somewhere anatomically improbable. > monitoring unu

> how are you actually supposed to inspect them if you have a legitimate reason? By shoving your middlebox somewhere anatomically improbable. > monitoring unusual behavior of your own system Anything that tries to connect to the internet for a reason that you didn't both understand and ask for in advance is malware. > Or is the security best-practice to just trust any app not to upload my contact list? Yes. That is it exactly.