[CommitSyn]

> So far I've, for example, found my banking app running something called a telemetry service, in the background, even if I set its battery profile to restricted. No way to stop that other than to uninstall the app.

Have you considered creating a new 'banking' user account that you only log in to when you need to access that app? Its incredibly easy with Graphene.