In a perfect world, outgoing network/file operations should be explicitly whitelisted in code using a decorator. And containers should limit which process/threa

In a perfect world, outgoing network/file operations should be explicitly whitelisted in code using a decorator. And containers should limit which process/thread can access which port/path.