And this is part of why I root.
Only certain apps get network access, and only certain apps get to use Google services.
They'll complain, some won't work.
Next phone won't have Google services at all, and untrustworthy apps will be sandboxed in their own profiles.
And quickly realizing they could be used for more.