Offline CTFs could also incorporate physical security challenges, like lockpicking

Ctfs need preparation and unconstrained internet, even if you block domains it’s possible to tunnel out

Since real-life situations involve AI, banning AI would make CTFs just a simple game, not a demonstration of capabilities and talent.