We have managed to disable the Copilot App on Landing page
# Connect with the appropriate scopes to create service principals
Connect-MgGraph -Scopes "Application.ReadWrite.All"
# Create service principal for the service Enterprise Copilot Platform (Microsoft 365 Copilot)
New-MgServicePrincipal -AppId fb8d773d-7ef8-4ec0-a117-179f88add510
# Create service principal for the service Security Copilot (Microsoft Security Copilot)
New-MgServicePrincipal -AppId bb5ffd56-39eb-458c-a53a-775ba21277da
# Create service principal for the service M365ChatClient (Copilot on landing page https://m365.cloud.microsoft/)
New-MgServicePrincipal -AppId "c0ab8ce9-e9a0-42e7-b064-33d422df41f1" #(this App ID might be different in your tenant)
if you apply the above two only it will give you no access message when accessing the landing page from it you can get the exact App ID for M365ChatClient
Then create a Conditional Access policies selecting the above Apps and Users\Groups per requirements to block them access to those Apps.
https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-all-users-copilot-ai-security