I know 'exactly' that I will need internet for research as well as installing dependencies.
And I imagine it's going to be the same for most developers out there, thus the "ask for permission" model.
That model seems to work quite well for millions of developers.
If you know then why do you need to be asked? A sandbox includes what you know you need in it, no more, no less.