a) Block every connection to Graphene's servers within the OS.
b) Add custom NTP server address (IP) or other www
I second this. I'd add frequency of time sync, other HTTPS-based network time servers (for self hosting) and maybe ability to set many endpoints with randomisation.