I originally posted this as a question, but was encouraged to repost here as the feature does not seem to exist currently:
I would imagine a way to configure a list of banned IEEE addresses.
Based on the screenshot from the linked Z2M thread, it seems like Z2M offers a “block from joining again” option when removing a device. This would be nice in ZHA too: