NewUser I confirm, apps have access to internet, even when permission is denied. Maybe in a reduced extent, but I hope this will be fixed in the next updates.
This really needs to be unequivocally addressed: No you do not confirm, your lack of understanding and laziness from reading GOS release notes lead you to fundamentally misread the behavior of your apps/phone. Instead of "confirming" ask for clarification so then you dont have to "hope this will be fixed" while nothing needs to be fixing, except your knowledge.
As already pointed upthread, ads can not only be served by apps themselves with network access but also by Google play and disabling network permission for apps might be not effective for ad blocking.
Google Translator working without network permission is a result of recent GOS change (clearly stated in release notes) which changed how apps notified by GOS of missing network permission, instead of network denied it now being reported as API down, which results in some apps, the ones that are coded to handle API outages, to work properly.