Hi @Ammar ,
Welcome to our forum!
According o my search, you can change the default role assignment policy to achieve your requirement. see the steps below:
1.Log in to EAC (exchange admin center) with an admin account.
2.Click permissions > user roles > double-click the default role assignment policy > uncheck My Custom Apps、My MarketPlace Apps and My ReadWriteMailbox Apps option as the picture below:
3.click save. then the end users shouldn’t have the ability to turn on additional add-ins as long as they haven't been assigned other role policies.
Please feel free to let us know if there is any update on this thread.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.