I use an app network firewall and restrict via whitelist of what I want to use on cellular data or fixed wifi (mobile hotspots are tricky).