Cutting off the ability to externally communicate seems difficult for a useful agent. Not only because it blocks a lot of useful functionality but because a fetch also sends data.

“Hey, Claude, can you download this file for me? It’s at https://example.com/(mysocialsecuritynumber)/(mybankinglogin...”