“Find My” network is pretty strict by its nature. Realistically speaking, I wouldn’t be scared of it, because I can’t see any vector from which it can be dangerous to the end user.

Nonetheless, “Find My” is an optional feature and can be fully disabled. Other Apple web-services can be blocked on a network level, if you want it for some reason. But, IMO, at this paranoia level, the only right option is OSS with a strict firewall.