Hacker News Reader

indeed OpenSnitch helps, pihole I'm not so sure (maybe if the c2c servers are in a blocklist...):

I though Pihole could act as a "whitelist-only" DNS server but maybe I'm wrong, that could be an additional layer.