How can AnyConnect be bypassed by a user when installed locked-down?

A.
When locked-down, AnyConnect can be bypassed by a user by changing the Browser
Proxy settings

B.
When locked-down, AnyConnect can be bypassed by a user if they know the admin
password

C.
AnyConnect cannot ever be bypassed by a user when installed locked-down

Explanation: