For that case, iOS could just run a system daemon to shuttle the app data to/from iCloud. The app itself should not need internet access for this.

I have no idea if this is what already happens, but I feel like it might be. (Why would each app have all these network connections when the system could just manage it instead?)