this is a fast moving thread... thanks for the replies.

will 'always ask' guarantee that no apps connect without permission? I think I might go for WIFI only, as that way there is no chance of me accidentally pressing a button on the always ask menu which is a mobile network