Internet on-ramps include the cell-tower network, cable ISPs and satellelite. After taking effective control over those, they have to take complete control of all 13 root nameservers. Then all local proxies, VPN's, tor entry nodes, I2P and all other anonymizing networks.
Then all hosting services, clouds, a shit-ton of 0-day encryption & chip exploits, etc..
The fact that you think this is possible shows how much power you are willing to hand over.