TICE is exactly what I needed, thank you! It seems to make sense to use NextDNS for application restriction solution
I think this feature is not available in Signal's iOS app, I didn't see it when I looked