I noticed it's possible for apps to end up with Network permission, when the same app is prior installed in the Owner profile (or in the Private space, depending where you do your first install), because it does not give you an option to disable Network permission during the 2nd install:
Install an app (that requires network access) through Owner profile, I tried with Accrescent and Aurora Store, uncheck Network permission during install. Now in the Private Space, install the same app the same way, it will not prompt with 'Do you want to install this app', therefore you cannot uncheck it's Network permission, therefore the app will be installed with Network permission in the Private space.
This also happens when you install the apps the 'opposite' direction, first in the Private Space and then in the Owner profile, the app in the Owner profile will then have Network permission.
This does not happen when I install using the default App Store or install an .apk through the File Manager, because it will give me an installer prompt during both the installations, so that I am able to uncheck Network permission.
Edit: This was after having Deleted and reinstalled the Private Space on version 2024102400.