i just noticed this is now in the arch repos proper.
i must admit ive missed something like this since my windows days, being able to block applications and keep a closer eye on whats going on
just remember to run
sudo systemctl enable --now opensnitchd
sudo systemctl start opensnitchd
for it to work