Speaking of Little Snitch, I suggest you look at 'iodé', an android phone with similar features built-in the OS.As far as I know this is the only true firewall on android
lineageOS is fine, though without play services | microG heaps of apps are broken.. I'd recommend switching to a non-AOSP based OS if you won't use those services, but if you stay on android you should definitely check iodéOS
I invite you to try iodéOS, where they stripped out Google's DNS & SUPL servers, and allow you to directly select the location module of your choice ..