Currently network permission can be controlled per app. Please allow creating a group, map apps to the group and allow network permission control for all apps in the group by 1 click.
Use case: great number of apps may access the internet after the VPN is established or when connected to home WiFi. Widget to display the permission status would be nice too, with on/off switch, with confirmation to prevent accidental switch.