@th_willenbrink@mastodontech.de @doragasu @rolandixor @lehtimaeki Yeah, you pretty much have to trust the developer. Or audit the code. You can use a firewall app, but Google Play doesn't allow most of those anyway. I recommend #CalyxOS for this, it has a nice built-in firewall app that actually can fully block internet access on an app-by-app basis, with the user in full control.
@eighthave @th_willenbrink @rolandixor @lehtimaeki Calyx is nice, but unfortunately it is not "Magisk friendly". I had it installed for about a month and had to go back to "LineageOS for microG" when I discovered OTA updates do not work if you have your boot patched by Magisk.