The model from TFA seems like it was being trained to browse and find information on the Web, so that constraint wouldn’t work.

> Could they have added a "no internet access" goal constraint?

They could have blocked network access and required that it use a tool. That would have made limiting and monitoring network access even easier.