You can let a subagent that doesn't have access to your data do the internet access.