App1 abuses notification permission
App2 keeps App1 in check
App3 to keep App2 from abusing network permission
...
I might actually try this now.
Fast/private DNS, firewall, logs, VPN (WireGuard) ready to go.