This is written with what feels like the peak understanding of my kid's school's IT department: "well, they're just so smart, we can't find any way of stopping them!"

An allowlist might be a good place to start.