Right, you’d have to deny the LLM access to online resources AND all web-capable tools… which severely limits an agent’s capabilities.