How do I prohibit snaps/snapd from accessing USB drives?

[tkn]

I want to prevent snaps from touching my external drives (USB) for both security and reliability reasons.

Is there any way to exclude '/dev/sdX' from the scope of snaps/snapd ?