Does a person using an unrooted Android device have any options to successfully monitor and even restrict all network access; and have assurance that they are properly configured so that any allowed connections are routed through the Orbot/Orfox bundle? [LG K20: Android 7.0] Thank You!
The only approach to this is to use something like a "no-root" firewall. A "no-root" firewall uses the same principle as the Orbot VPN mode, except it uses it's position to deny connections to specific apps.
In this way, you could deny connections to all apps, except for Orbot effectively only allowing apps that can locally talk to Orbot be able to reach the internet, through Tor.
This would require that the apps are natively capable of utilising either an HTTP or SOCKS proxy and it has limitations, specifically ones that OrWall attempts to prevent. For example, the VPN might not be active during boot or before Orbot starts, which is why part of the OrWall design is to insert and init script to stop connections happening before the app can initialize and reconfigure the users iptables settings.
So there isn't something that is equivalent to OrWall without root, the closest solution would be some kind of "no-root" firewall.