It seems to be plausible, I’d guess you need to use XDP or something similar to it to drop/alter 80211 packets at the data layer.
https://github.com/SIOTLAB/FLIP/tree/master This may be a good place to start
Alternatively netlink could be another route to research https://www.kernel.org/doc/html/next/userspace-api/netlink/intro.html It seems this is a way the kernel talks to userspace networking applications like iw im not sure about NetworkManager in particular.
It’s probably more effort than worth it doing this through ebpf is my two cents, what is this for?
Mean but admining a public endpoint without this even crossing your mind is a good way to out how green you are