Comment by serbuvlad

Honestly I think this is as much a failure in the design of the Internet Protocol, the World Wide Web and associated protocols as much as it is a sandboxing failure.

There is simply no way to mark certain network routes, segments etc. as read-only.

What you want is to train these models with read-only access to the internet, but this is unfortunately impossible with current technology.