Or update/modify the networking, WiFi, routing, gateway, firewall, or other configurations on the device itself such that it connects to and communicates over only specified networks and/or hosts.

Again my point is that relying on off-device, local-netork hardware and configs is brittle.