how to prevent services from starting on active dataguard database

How can I prevent someone from starting services on an active dataguard database? we are using 19.23 DB. We want to prevent any service from starting either automatically or accidentally by someone starting a service on the cluster.

I know you can set -role in the service creation but this only starts the service based on PRIMARY, PHYSICAL_STANDBY, etc. but it does not prevent startup on a database that does not match the role.

I would like an automatic foolproof way to prevent service startup. we don't want to drop/recreate services, etc. I also don't want a procedural fix as this is also prone to human error. we need to ensure that no service starts on the read-only standby.