You can do that with plenty of network scanning apps, and you shouldn’t be doing that on device anyway. Not sure how Linux would stop that when you could install a bad package, or run apt update on something that has had a supply chain vulnerability.

If you're willing to consider supply chain vulnerabilities when considering whether someone is spying on you, who's to say there's not a supply chain attack against Wireshark that hides the malicious traffic?

For example you could be running a hackintosh.

Aren't hackintoshes virtually dead with the latest release of MacOS?

Soon as they force 11, I’m switching back to a Linux desktop, but honestly I’m not looking forward to it.

I don't know when you last used Linux, but I can virtually guarantee that the new user experience is better than you remember it being. The last time I had a driver issue with anything apart from my graphics card (and that was easily resolved) was roughly ten years ago. As for the new user experience and just getting everything set up without using the terminal, confessedly, I'm an Arch user, so I'm a bit out of touch with the newbie side of the Linux distro world, but from what I've heard, Bazzite makes the transition fairly painless.