USB type C storage device restriction

Hi All, I am new to Defender for Endpoint, I need to understand.

Can all features of Defender for Endpoint be used without Intune?
Can Defender for Endpoint restrict/block USB type C storage devices?
Can Defender for Endpoint Allow a machine to access any USB device based on Vendor ID/Hardware ID?
Can Defender for Endpoint Allow a USB device to be accessible from any machine or a group of machine?