

Up until today I was happy with turning off updates (as a precaution) and restricting Nova’s internet access (all phone network access is proxied through Rethink+), but this made me switch to Lawnchair and leave a 1-star review for both the free version and the paid upgrade token.
It’s excellent, you can filter network access per app, or per IP, or isolate an app and allow it to access only certain addresses / ranges and the interface is really intuitive and user-friendly.