Politeness vs Enforcement: Why "Set HTTPS_PROXY" Isn't a Security Control

If your agent egress story is "we set HTTPS_PROXY to point at the proxy," the proxy is asking nicely....