It depends if the application itself touches the Internet or only when conducting updates. The threat model for a server and for a personal computer are very d

It depends if the application itself touches the Internet or only when conducting updates. The threat model for a server and for a personal computer are very different. On a consumer device, typically only the OS mail app and browser have direct contact with the outside world.