Once our sandbox is complete, apps will not be able to "phone home" unless the user grants permission, so users will need to opt into any experiments. Currentl

Once our sandbox is complete, apps will not be able to "phone home" unless the user grants permission, so users will need to opt into any experiments. Currently there are two reasons this isn't true yet: * We haven't implemented client-side sandboxing yet. It's not incredibly hard (content-security-policy header, some tweaking of apps), but hasn't hit the top of the priority queue. * The server sandbox currently has some intentionally-poked holes allowing apps to do things like pull RSS feeds from the internet. We plan to close these once the Powerbox UI is implemented, which is the main permission-granting interface, but that's a major project and we wanted to get some useful apps working in the meantime.