As a network guy, this point has always made me the itchiest. How is it that I can sandbox agents better than a multi-billion dollar company?

The stakes were that high and they weren't running constant PCAPs with DPI and a bunch of alerts? All of that activity to the package manager would have immediately set off multiple alarms in my lab if I was trying to keep things contained. Something doesn't add up.