Why do I "have to trust native apps"? I owe them nothing and they can happily work in a sandbox where they have access to a their own folder and files that I allow them to use. If I decide they don't need network, then they don't need network.

> a photo editor could need a network connection when it contains collaborative features. Or whatever.

Or none, if I decide to not allow it.