OpenAI is an AI capabilities firm & nonprofit. They spend almost all their time pushing the forefront of generalist AI reasoning. The reason they have not let an AGI proper out of the box already is because they do not have an AGI yet. Not sure what you expected of them, exactly, especially when it comes to their smaller models.
Yes:
Our browsing environment does not allow full web access, but allows the model to send queries to the Microsoft Bing Web Search API and follow links that already exist on the web, which can have side-effects.
What they mean by following is, specifically, only allowing HTTP GET/HEAD requests, rather than PUT/POST/DELETE etc. According to the standards, a GET is supposed to be free of (observable) side-effects and never have consequences worse than wasting bandwidth. In practice, on many websites, a GET will do all sorts of stuff, as I've learned the hard way, and is one reason that browsers no longer prefetch links aggressively (too many cases of users logging themselves out, deleting files, banning people etc).
Note that while WebGPT had live Internet access, DeepMind's competing work is even more alarming from a tool-AIs-want-to-be-agent-AIs perspective.
At WebGPT: Improving the Factual Accuracy
of Language Models through Web Browsing, OpenAI describes their model:
To me that sounds like they decided to let GPT-3 interact with the open internet which is the common standard for what it means to be left out of the box. If my assessement correct? If so, what do we learn from this?