You have use a client side app firewall to prevent all traffic until you have acquired your session.

This is extremely difficult to do even for skilled people.

Android has the ability to isolate the network stacks for different apps/connections till you have cleared the wifi portal.