The platform has a global whitelist, please could I suggest future profile templates include a global block list to allow us to easily block a safe application for all devices.

For example I want to block MS Quick Assist for all endpoints.