I'm not interested in any language with ambient authority, where every function may decide to read a file and phone home without declaring that in its signature.