How much data can an app steal from my MacBook if I allow its system-wide execution?
This is not an exact answer to what you are looking for, but it is ONE way that you can keep your system safe.

Basically it is an outbound firewall that I have been using for years (I hold no interest in the company, just a happy customer) and it is called Little Snitch.

Basically, once installed, it monitors ALL network traffic and throws up a warning when it sees any. Training it to respect your preferences can be a bit tedious as it presents a dialog on absolutely everything on the Mac that wants to talk to something on the internet.

But with a little perseverance and some intimate knowledge of what certain processes are you can essentially block anything that wants to initiate anything in the way of an outbound network connection. It's not free but worth every penny.

There are likely other things out there that might do the trick. I think there is a Docker project for the Mac, but I have no expertise or knowledge of it other than it (may) exist. But Little Snitch is a worthy addition to every Mac user's Mac who enjoys fiddling around with more than email, a web browser and a few apps &amp; games.