In fact, I wonder if teaching it "this is a bypass" would help it to model when it's doing its job vs working around the job.
Could they have added a "no internet access" goal constraint?
They could have blocked network access and required that it use a tool. That would have made limiting and monitoring network access even easier.