I’ve grown to depend on little snitch for this sort of thing. Always run in either Alert or Deny mode.

It is a little wild how many things expect to communicate with the internet, even if you tell them not to.

Example: the Cline plugin for vscode has an option to turn off telemetry, but even then it tries to talk to a server on every prompt, even when using local ollama.