So Affinity Photo is making all kinds of requests from the Macs it's installed on. Don't know why it does that, but it's not good.
On the Mac sandbox the ability to make client requests is a boolean: all or nothing. Since most apps like to connect to get additional resources/whatever, it's usually on, right? As a result: zero protection against this.
https://mastodon.ar.al/@aral/113759435866651420
This is why I've been putting so much thought into outgoing net requests for #Dropserver. It's hard to get right.
1/