How is the user supposed to tell Damus to have network for some things but not for that secure sub process? He cant. The entire point of a second app like Amber, is to give the user the ability to deny network permissions instead of having to trust the developer to have done it correctly.

You think you'll never make a mistake. You may be right, but I'd still rather not have to trust you.