Seems cheaper (and so far more robust) to have an agent audit downloaded code

The endgame is to generate a binary image for an entire single-purpose OS/unikernel that does exactly and only what you require of it. No source to open or close.

this