Interestingly mozilla has effectively done this here, by using a GitHub action that automatically closes any PR with a message explaining that PRs are not to be used.

It's very silly they have to do this, but at least they can I suppose.