There is a solution though. I don't like it, but we use MDM to disable iCloud file sync, scan network communication and such.