This is incidentally why I run a hefty firewall for outgoing traffic and most endpoints can't access the internet at all.