This happened to me an hour ago, and I thought it would be an interesting thing for the HN crowd to see - I had a transient DNS failure and OpenCode (which is running inside Toad, a TUI ACP front-end I prefer) decided to go get via a Chinese proxy. Fortunately I was using it inside a container (https://github.com/rcarmo/toadbox).
Now, this is interesting for several reasons--the first is that even with tool whitelisting this kind of thing might happen, and the second is the _why_. I happen to know about how popular Go is in China and that the proxy approach is... well... kinda official, but it's also a great demonstration of how LLMs leverage "knowledge" in a completely non-linear way.
I'm also _very_ curious as to what model OpenCode is invoking by default for this (I know they have several--I was just using it out of the box, and deleted the container, so we'll probably never know...).