We are an entirely Intune managed Windows environment, and just starting our Intune managed macOS journey. Really loving how fast macOS builds (ADE/new PSSO) 🥳. One challenge we're facing is the pre-installed macOS apps cannot be uninstalled (where we can uninstall the Store apps on Windows). Other apps install bypassing elevation (same issue as on Windows - e.g. Chrome, Firefox, Zoom etc.). What is the best way through Intune (or other methods) to prevent apps from installing and running on macOS please (ideally using a blocklist)?