GrapheneOS let you disable internet access permission before installing an app.
I think you can disable it on OnePlus too but after installing the app. Probably other manufacters has this feature in their Android flavors. But yes running NetGuard isn't ideal in many scenarios.
