@sneak
> little snitch/lulu allow you to confirm/deny every outbound connection an app makes, so no invisible calls to data brokers.

That seems cool, how are they doing this? Is apple forcing developers to use one library for http requests, that thoose apps can preload themselves into?

Or do they open a DNS Server and show you every request? (DoT would be an issue tho)