Question on controlling WeTransfer download/upload

SB V 

It looks like WeTransfer supports SAML for single sign-on, so you can control upload and download (separately, if you wish) for your WeTransfer tenant/instance, using CAAC, as described at https://docs.microsoft.com/en-us/defender-cloud-apps/proxy-intro-aad

To deploy, you must use SSO and follow the steps for your SSO solution (Azure AD, OKTA, etc.)