Create pipelines through which workspaces need to be provisioned
Disable out of the box Team and SharePoint creation in favour of clearly defined pipeline provisioning with governance and approval rules.
The goal is not to make it harder for people to create content, but to ensure that created workspaces:
Are necessary and not duplicated
Associated to the correct hub
Have the appropriate security and sharing settings applied