Not familiar with this, but jumping on the opensnitch bandwagon. I use it, plus ufw, plus pihole.

Kill the DNS lookups, kill it at the network level of possible, and if it’s sneaky OpenSnitch catches it at the application layer.

I have to second this. Even if none of that was true, they find you through the “you shaped hole” in the lives of the ppl around you. That’s the best you can hoped for IMO