If you are concerned with security, you can install postmaster or any other firewall force block all the internet connection and deny all the connections and then manually start allowing apps and process access to internet.

It's an annoying process. It takes a lot of time to set up, but once it gets going, you will be mostly secure from this type of attack.

So, sort of security over convenience.

If you mean physical tab key on your keyboard you can use "Hacker keyboard" from F-Droid

https://f-droid.org/en/packages/org.pocketworkstation.pckeyboard/