Controlling Microsoft / Windows store via Intune or Intune for Edu?

My goal is to disable the store via MDM policy except for Store for Education and the apps that have been approved. On Intune for Edu I found these three settings:

Block installing apps from the Microsoft Store for Education

Require Microsoft Store for Education apps to be installed from the private store

Block users from installing apps from places other than the Microsoft Store for Education

These settings seem to restrict the Education store rather than the rest which is exact opposite of what I want. Am I missing something here or is there a way to due this in Intune that I am missing?