Membrane programs cannot make network requests or access your graph unless they are explicitly given access to the right nodes. You're in complete control of which programs can access what.

Even the standard fetch function is implemented in terms of graph nodes. It's through the graph that programs make HTTP requests, send emails, access APIs, and so on.

The graph ensures that programs, including those you didn't write, only execute their intended functions and nothing more. It is how programs communicate with each other and the outside world.

The graph is explorable and typed. Anything is referenceable so access to data can be very fine-grained. We like to think of it as a capability-based access control model.