this is what I do currently (GrapheneOS Network Permission), but I'm just curious if there are any other alternatives out there. it's slightly easier to have trust the software I use from the get-go, not hinder it so it can be trusted, if that makes sense
I also use a proprietary launcher (Niagara) with network permission off. I tried kvaesito, kiss and lawnchair before but none of them are in my experience as polished as Niagara and smart launcher.