You should be able to kind of do both through android settings
Settings -> Apps -> YourApp -> Mobile data usage -> Allow Network access and Mobile Data
For VPN you’ll need to add a VPN and then Settings -> Network and Internet -> VPN -> YourVPN -> Always on VPN and Block Connections without VPN. This blocks all apps. There is 2 issues with this though, Blocking connections will block split tunneling connections set up through VPNs and also potentially this depending on the apps you’re using https://mullvad.net/en/blog/dns-traffic-can-leak-outside-the-vpn-tunnel-on-android
I see the Extend part of Embrace Extend Extinguish is about to start…