I think if I used Linux either that or Lulu would be what I'd go with, but AFAICT OpenSnitch uses wording that suggests it is actually suspending connections for the prompts instead of outright blocking them. I can't find any info on this in the README so I could be wrong but that could probably work yeah.