I mean if the USB host device itself has specialized USB hardware that can lock the ports in power only until they're fully enabled by the OS, then you'd be in

I mean if the USB host device itself has specialized USB hardware that can lock the ports in power only until they're fully enabled by the OS, then you'd be in a better position. Either that or a tiny switch beside each port to enable/disable the neutering feature.