"Communication" has a fairly big surface area, and "at the same time" is not sufficient if there's any ability for the LLM to persist data. E.g.: if it can write to a file, it could check for outside communication ability and upload that file only when that ability exists.

And then, depending on what threat profiles you're concerned about, you may need to be thinking about side-channel attacks.