The first app I install in any Android device I get my hands on is NoRoot Firewall, and block (global) any offensive IPs or URLs.

Another option that annoys me (but I understand it is user friendly to have it enabled by default) is that when you install an app it automatically switches on Data and WiFi access to it (and the firewall blocks it until I allow it).