Android has app system level options in the settings to disable WiFi/mobile data.
I tend to use that, and use Netguard as a fallback because the latter has an off by default config incase I forget to disable it for new apps.
Netguard on its own is insufficient because sometimes you'd need to use an actual VPN (which turns off Netguard)