Any protected firewall available
Try making them device administrators. I know that AFwall+ can be set as device admistrator. I have not used Netguard except for testing purposes in the last year but I believe it is also possible to set it as device admistrator.