well actually i'm afraid they can already disable that temporarily without leaving traces (probably via service text or hidden push, same for other vendors not only apple, it's a good time to install a firewall or connection blocker on the phone, so that you can see exactly which kind of traffic and requests are going / coming from it and allow / disallow them by need