This is why I loved comodo firewall back in the day. You could block all outgoing connections, including some system processes. You would get a nice little dial

This is why I loved comodo firewall back in the day. You could block all outgoing connections, including some system processes. You would get a nice little dialog detailing what process was trying to reach the internet and what it was trying to connect to, on what port, and you could on-the-spot set up a policy for that app. Phones need this even more than PCs ever did. CyanogenMod people should look into this kind of functionality. Sure, google will try to make it impossible, but that won't stop a determined reverse engineer from making basic personal privacy available to anyone who wants it + can install a custom ROM.