OpenAI is an AI capabilities firm & nonprofit. They spend almost all their time pushing the forefront of generalist AI reasoning. The reason they have not let an AGI proper out of the box already is because they do not have an AGI yet. Not sure what you expected of them, exactly, especially when it comes to their smaller models.
GPT isn't an AGI but it's certainly an AI. In this case, it seems they let it use a web browser and provide information for queries that will be sent to outside servers.
Yes:
Our browsing environment does not allow full web access, but allows the model to send queries to the Microsoft Bing Web Search API and follow links that already exist on the web, which can have side-effects.
What they mean by following is, specifically, only allowing HTTP GET/HEAD requests, rather than PUT/POST/DELETE etc. According to the standards, a GET is supposed to be free of (observable) side-effects and never have consequences worse than wasting bandwidth. In practice, on many websites, a GET will do all sorts of stuff, as I've learned the hard way, and is one reason that browsers no longer prefetch links aggressively (too many cases of users logging themselves out, deleting files, banning people etc).
Note that while WebGPT had live Internet access, DeepMind's competing work is even more alarming from a tool-AIs-want-to-be-agent-AIs perspective.
I think we have a core lesson here. Anybody who talks about boxing should just acknowledge that the kind of organizations that would actually develop AGI don't engage in such activities.
At WebGPT: Improving the Factual Accuracy
of Language Models through Web Browsing, OpenAI describes their model:
To me that sounds like they decided to let GPT-3 interact with the open internet which is the common standard for what it means to be left out of the box. If my assessement correct? If so, what do we learn from this?