It seems to be the first time I'm seeing Apple themselves officially recommending a "defaults write" command.
defaults write com.apple.desktopservices DSDontWriteUSBStores -bool TRUE
https://support.apple.com/guide/terminal/edit-property-lists...