We return to the same adage(s):
-there is no such thing as a free lunch
-if it is free then you are the product.
As always I suggest NoRoot Firewall for everything-Android. But yes it's called a trade-off, like accepting a "free" security software from your ISP which technically invalidates all your encryption efforts.
Except even if you pay you're still the product. Data is a currency, they'll happily take it if you offer it :)