block/unmount iPhone connection to a MacOs

That’s basically malware you’re working on, albeit by another name.

The Apple approach uses MDM, but that is probably not a good fit for where you’re headed

You might want to discuss the whole app with Apple Developer Support, as I’d expect trouble ahead.

Keith Barkley wrote:

Not necessarily, at Sandia, all the computers on the classified network had their USB ports blocked.

I guess you could consider it MalWare, but it had a purpose.

I’m well aware of entities that wish to maintain controls over data, having worked with and having worked on OS support for mandatory access controls running in both system high and multi-level security configurations. Wouldn’t surprise me that some of that code got deployed at Sandia, too.

In this context, this effort is still basically malware, albeit by a different name, and a different purpose.

It’s in the realm of the Mac mandatory access controls (Mac macOS MAC, not often I get to write that) TrustedBSD code, but I’m not sure that macOS code even still supported or user-accessible. Outside of its use underneath SIP and sandboxes and ilk.

Semi-related: macOS Security Compliance Project - Apple Support

A discussion with developer support will hopefully get the OP to something that might be more maintainable.

Not necessarily, at Sandia, all the computers on the classified network had their USB ports blocked.

I guess you could consider it MalWare, but it had a purpose.