By using the correct and exact network and subnet masks, CR1 will not turn on OSPF on new interfaces and it cannot exchange OSPF with other network devices by other interfaces than Gi0/0 & Gi0/1.
In this question we should understand that these commands make sure CR1 cannot form OSPF neighbor relationship with other routers directly (on a new interface). If it is connected through a switch then surely it can form OSPF neighbor relationship. For example if we add a new router to SW3 in the 10.165.231.0/24 subnet then surely it will create OSPF neighbor relationshipo with CR1.
Answer "router ospf 1
network 0.0.0.0 255.255.255.255 area 0
passive-interface GigabitEthernet0/2"
is not correct because if CR1 has a new interface then OSPF will also be turned on that interface.
Answer "interface Gi0/2
ip ospf 1 area 0
!
router ospf 1
passive-interface GigabitEthernet0/2"
is not correct as OSPF is not run on Gi0/1 and CR1 and CR3 cannot exchange OSPF information.

Border Node: The border nodes serve as the gateways between the Cisco SD-Access fabric and external networks.