My global CLAUDE.md/AGENTS.md etc have strict rules to never use subagents without approval or when specifically requested except for whitelisted scenarios.

I think that's the way to go most of the time