[xuki]

> why can't I disable network access entirely for some apps

Apple kind of do this in China. Each app on Chinese iPhone needs to ask for permission when they access WiFi for the first time. Combine with cellular blocking, you can effectively block internet access for an app.