Is there a simple way of making sure that a non-interactive shell on Linux can never execute a specific program?

Shitty applications will find impressive ways to ignore your browser defaults and try opening a chrome browser at the worst times (or even try to overwrite the default). I want to make sure that my user, from an interactive shell, can be the only way a chromium based browser ever gets executed. Is that too much to ask? Ideally in a way that prevents its automatic discoverability so it isn't even an option in context menus and so on...