Datura Firewall is a frontend for the leaky LineageOS network toggles. It presents options that it's not capable of providing correctly.

Packet-based firewalls are inherently leaky compared to say, the GrapheneOS Network toggle. The Network toggle disables direct socket access like a firewall but also disables indirect access via APIs requiring the INTERNET permission eliminating all known leaks via the OS. 

 Interesting. I'm not entirety ready to jump on graphene but will keep that in mind. Thanks for sharing 

 Have not tried it but I understand Linux works fine 

 With Graphene you can have multiple profiles so you can have an NPC account and a sovereign account on the same device. And it's not especially obvious unless you know how to look for it.  

 Calyx is good too and maybe more choices of device. 
Graphene is excellent but pretty much limited to Pixel only