This is actually an existing Strava feature called Privacy Zones[1]. It doesn't explicitly say that setting up a Privacy Zone will render activities which exist entirely within those zones private or that the Global Heatmap respects privacy zones but those are reasonable assumptions.

[1] https://support.strava.com/hc/en-us/articles/115000173384-Pr...