I know you can have an extension detect Oracle JDK during inventory, then it runs a policy to delete oracle java. It won't be real time, but runs whenever the Jamf inventory is ran.
Could have the policy just run every time on login if it's there or not.
Newer versions of macOS no longer include python, so if your target machines doesn't have python installed, your script won't run.
