You should be able to go into App Info>Mobile Data & Wifi and disable network access without installing anything on the latest versions of Android if I am not mistaken.

You can also use apps like Shelter to create work and personal profiles if you want to cleanly separate the two.

In my graphene os settings I can toggle a permission that a app doesn't have internet access anymore

Afwall+ if you're rooted is by far the best app for this.

Next up if you're not rooted is RethinkDNS.

Both superior to this app imo.

You can do this with any VPN app that allows for split tunneling. Like Mullvad VPN.

Enable the VPN, go to system settings, and set always-on VPN, and set all apps MUST use vpn. Then configure whatever app you don't want to have internet access in the VPN as the split tunneling.

So if you make chrome split in the VPN, but the OS requires all traffic to use the VPN, then chrome will have no internet access.

This is all fine and good, but complex and easy to make mistakes, better to use Graphene or Calyx which makes this a first class feature

TrackerControl on FDroid gives you the ability to block trackers only but let the app access internet of block the app completely from the internet.

I can do it on my Poco f3 without any app. There is "Restrics data usage" in each app settings.

You can't use it with a VPN.

I wish more VPN apps had this feature built in.