This is a Windows question as Windows has to be able to do something before Intune can send a policy to enforce it.
To the best of my knowledge though, no, there is no way to block this. The standard recommendation here though is to not use pre-shared keys for wireless as that's inherently insecure and not considered enterprise ready.