There are multiple firewall options, but it's worth noting that Apple can circumvent them at a kernel-level if they want to phone home. You should think long and hard about how much you trust Apple before switching everything over.