> Only a completely closed-off environment with no access to the internet could prevent this.

Even then, an LLM running locally could still operate.