@feld @dalias @cloud_manul @thesamesam @mirabilos Oh I'm pretty sure there's still systems out there without sandboxing in fact Alpine's abuild isn't network isolated.
Pretty visible for things like Go packages where network isolation means either a ton of dependencies or ton of source tarballs (which is a bit why I barely touch anything go anymore).