Comment by amatix

TripMode (https://tripmode.ch/) for filtering application Internet access when you're running on mobile data uses a kernel extension.