We're mandating use of Google Chrome across the org and use the Chrome Enterprise features to force installing (ad blocker, 1Password) and block (Grammarly amongst others) extensions: https://support.google.com/chrome/a/answer/9296680?hl=en

I'm not entirely sure if it's a feature that only comes with Google Workplace, but as part of the Workplace admin interface we get a nice UI for managing all of this.