There are two binaries commited to the repo (cap_wasm_bg.wasm) but from what I can tell, it doesn't seem to be making any network calls or what have you. They still should get rid of them and add a Rust build step for their browser/node packages.
[1]: https://github.com/tiagorangel1/cap/blob/main/wasm/build.js
Very surprised to get pushback on what I thought was an industry standard lmao