No amount of OPSEC lectures or packet inspection is going to sufficiently keep the carrier's private information private. There's thousands of sailors on these things. When details like its location and readiness level actually need to be secret, all regular internet access should just be cut off. Radio silence. I assume this person had internet access to use Strava because the carrier isn't yet in some higher level of readiness and its location isn't yet considered much of a secret.
Yep. A full moat is the only sure way, and indeed, the OPSEC lectures and even pre-announced severe punishments will never be 100% — there is always some idiot who thinks he is special and rationalizes it in his head. Allowing traffic to only a small pre-vetted whitelist of sites works only until someone fires up a VPN, which again, no amount of lectures & punishments will prevent.
