Why do you say it's equally difficult? By limiting network operations of a local application you can indeed prove this, as long as you trust the facilities provided by the operating system.

With web applications doing the same is more difficult, because you need to pass some requests, and some requests need to pass while others could be smuggling data.