Sure but will it bypass your established network routing if it can’t change it?

If you are setting up a secure system though you would only use a package manager that needed sudo

For a while I think trident had coffee flavoured gum, and orange flavour. They were both delicious

Hopefully smarter people than I chime in, but if the users aren’t part of sudoers then they shouldn’t be able to install anything. However app images exist, and I’m not sure if those TOR out without network control