They gave it a full package manager with internet access. They could have used a local cache and air gapped it, but they chose not too.