This is how third party keyboards work on iOS. No network access by default, but the user can go into settings and grant network permission if they judge it fit to.

I think this model would make a lot of sense for Android launchers, too, given how they continually run and potentially have access to much more user data than is typical.

Honestly it should be how all apps work. I hate that I can’t deny Internet access to any app.