GrapheneOS has that. It asks every time you install a new app whether it should have network permissions.