Yes there is a way to impose a static allowlist. As a very simple example, you can disable certain servers completely via the UI or the API.