Sandbox egress control essential for untrusted code

Running untrusted code safely requires egress control, not just host isolation. A microVM prevents host access but cannot stop data exfiltration, internal probing, or internet attacks. Isolation without egress control contains the process, not its consequences.