I am surprised that Google spends so much time tackling custom ROMs via it's Play Integrity API. If only they paid that much attention to say, curating the Play Store more, it had be much better for everyone
There's also NetGuard and rethink that spoof VPN connections to filter traffic. I use the latter to block all outgoing apps except for the ones I allow.