Initially I believe so, but they can then be isolated via VLAN / firewall rules and cut off from internet access.