How much of the data going in and out of the country still does it by wire (or glass) and how much by satellite? Once upon a time you didn't call Europe without going over a transatlantic cable. Seems pretty straightforward to limit their access only to the points where something leaves the country.
Yes, this leaves cases of foreigners here, or Americans abroad, but it gets us a hell of a lot closer to their documented mandate.