Agreed. Currently the only way to have any control on outbound traffic is via an egress IP. While a nice addition, it costs $25/month for the privilege. Also, you still have no control over what ports you can open/close (for example outbound SSH still doesn't work)