Have you considered running something like Pi-Hole, and using it as the primary DNS for all of your devices?

This would allow you to do DNS level filtering. ie blacklist the mothership, and stop your devices from 'phoning home' ...