if you download them, you can remove all internet access for the model going forward on the task, don't want to http proxy like OpenAi now do we?

Yeah that's more my point. I've seen the logs for what these things do when I leave them unattended. I wouldn't trust anything to go out to the open network, especially with my credentials. Maybe mcp server to an offline database.