I wish this were a capability you could (as a user) grant or reject at will. But there’s a UI problem: people are sick of clicking accept on a million dialog boxes already.

GrapheneOS gives per-app network access control.

Your wish exists. The first thing my phone asks before I install a new app is whether to allow network access or not.

Android and iOS developers need to explicitly request network access in their app's configurations.