afaik there isn't a way to limit this use case (like what happened to OP_RETURN) without either crippling what taproot allows for complex signature schemes or entirely taking away the witness discount (hard fork).