I used to use a firewall called netguard on my android phone to block an apps cell data connection

I do this. Personally I use cloudflaire for my domain and dns, not that I'm committed to them it's just what I use. I then use protonmail for my email and point the relivent records to them.