Block Network Access for Game?

I know there are some tools including firejail and bindtointerface on standard Linux Distros, but they don't run in userland, so whenever the deck updates they will be overwritten.

Anyone have any ideas how to block access on a Steam Deck?