NetGuard is a very reliable solution. It is ‘another app’ but it is stable and very good (and open source).
I have rooted almost all of my android phones since Android 4. If I root it, i will use the app Afwall+, and Adway for an adblocking hosts file.
For some unrooted phones (to play Pokemon Go), I will use NetGuard with a hosts file.
Only the github release for NetGuard has the option to import a custom hosts file, Releases · M66B/NetGuard · GitHub
NetGuard/ADBLOCKING.md at master · M66B/NetGuard · GitHub
NetGuard is from the same developer who created XPrivacy back in the day
Rooting an android phone is always a very risky process. If you really want to root your FP, please read a lot about the rooting process via Magisk, and what can go wrong…
Rooting will result in not being able to upgrade via OTA, but only via flashing via fastboot (will wipe your whole phone). Most apps will work on a rooted phone, except some banking apps, games and google pay will not be available. In Magisk you can configure a ‘Denylist’ this effectifly will try to hide root for the selected apps, it is not foolproof though (banking apps will work again, but no nfc payments, DigID will not scan qr codes on my phone when rooted).
If nfc/wireless payments via FP5 are important to you, do not root.
I mainly root my phones for total control. I bought the phone, so i would like to be able to do with it however i see fit (adblocking, firewall, custom roms, etc). I have hard-bricked a couple of phones in the past when rooting went completely wrong, so please be very carefull.
Please correct me if have missed anything crucial…
Edit: /e/os has the setting per app to disable/enable data and wireless connections (no rooting required)