Included network access depends on the service plan and the way the Mac environment has been provisioned. Use the service details in your account as the source of truth for the IP, connectivity, and access methods available to your system.
If your workflow requires inbound services, remote desktop, CI runners, or domain-based access, confirm those needs against the actual service details instead of assuming every plan exposes the same network model.
For security, keep the exposed surface as small as your workload allows.