FWIW, GrapheneOS supports disabling internet access for apps.