Installation of apps and updates is handled by Android, the app itself doesn't need internet access permission for that purpose.
Internet access isn't a problem as long as the app doesn't have access to "the phone number and serial number of this phone, whether a call is active, the number that call is connected to and the like."