What happened to isolating the build box from the Internet? Do people really just let their build systems make outbound connections willy-nilly? That's fucking

What happened to isolating the build box from the Internet? Do people really just let their build systems make outbound connections willy-nilly? That's fucking insanity. People who behave like this are definitely not reviewing their deps.