Rethink DNS can block internet access of an app (besides doing DNS-based blocking, etc.): https://rethinkdns.com

It uses the VPN functionality, but you can stack a Wireguard VPN on top of it.

Netguard No Root Firewall still works for me: https://github.com/M66B/NetGuard

+1 for Netguard, it is awesome. A bit clumsy UI, but indispensible.

It looks like you can't revoke the internet permission, but you can use the firewall via ADB. Settings are lost on reboot, but you can use an automation with Tasker or similar to set them on boot:

https://www.reddit.com/r/tasker/comments/1mxjnvs/how_to_bloc...

Not the same thing, but you can install an app like Blokada Libre to block ads and trackers in all apps.

https://blokada.org/

Or you can set your DNS resolver to dns.adguard-dns.com and it blocks almost all ads. You can search "private dns" in Android settings app and set it there.

This has the disadvantage that you can’t whitelist specific domains, which is something I need pretty often.

You can signup for private adguard dns, then you should be able to whitelist domains.

Go to settings > App > $SCUMMY_APP > Mobile Data & WiFi. Uncheck all.

Not a thing on stock android

Why does Apple not give that Wi-Fi option there? I mean, is there a reason we’d be sympathetic to?