German paper and doesn't suggest to fully disable run or win+r/x but enable constrained mode. Might be start?
BSI is the German equivalent to CISA.
https://www.bsi.bund.de/SharedDocs/Cybersicherheitswarnungen/DE/2026/2026-287419-1032.pdf?__blob=publicationFile&v=2