I installed an AppArmor profile for Obsidian. For an application that displays text files, it needed a lot of permissions. It would refuse to run without network access.

You can install Obsidian flatpak and lock it down with flatseal.