brandy078 I have it behid rethinkdns with on-device blocklists, so all those graph., dit. are blocked by hagezi etc.
However, that doesn't guarantee the data is sent via "core" domains.
If you're OK to disable voice calls, you can limit it even further.