If that’s the case then I believe just controlling notifications for those two apps for each focus probably gets you what you want. Then also go to iOS Settings > Outlook > and disable the authorization for it to use Time Sensitive Notifications. I have a similar setup on my devices.
Funny you say that, setting it up without internet is one of the few ways left to still be able to create a local account.
That’s the point of “time sensitive”, That it bypasses focus. Perhaps you can disallow the time sensitive option in settings and just allow all notifications from that app in the other focus modes that you want and disallow in the ones you don’t?
Self signed certs still have to abide. It’s the browser that checks it not the issuer. Now granted in most cases you already get a non trusted warning that most sysadmins skip…