on individual level for basic things I found hooks pretty good, you can block tool executions easily.

I think here the question will be how to scale rules on team level.

Obviously sandboxing will be needed if we want proper gates.