I just use the "net none" option. For the rest of the programs, Firejail default profiles are spot on.

Alternatively, you can use bwrap --share-net=none emacs.