Good luck doing hardware development without USB ports, as the IT team at my employer recently found out.
Second best option is to whitelist USB's PID and VID.
Second best option is to whitelist USB's PID and VID.