FYI, already implemented an initial approach, ready for testing: https://lists.freedesktop.org/archives/modemmanager-devel/2017-October/005969.html
In the Debian case, you would want to use "--filter-policy=STRICT" when starting ModemManager. -- Aleksander https://aleksander.es