The Cpi Guard Extension
The CpiGuard extension is a Token account extension that prohibits certain actions inside cross-program invocations, protecting users from malicious programs that might attempt to manipulate their token accounts without explicit consent.
Unfortunately it's not possible to initialize or update the CpiGuard extension through a CPI, for more information read this