an app called Lockdown provides an on-device firewall. But it is unusable because (a) when away from wifi, it requires access to Mobile Data. (b) it provides various “block” lists but does not give visibility to the domains that are passing thru. Proton VPN does not yet let me block all the insidious trackers built into apps.