@ireneista @mcc I think it would be simple enough in a Linux system - make sure the entire USB driver stack was built as dynamic modules, and disable/remove all but the usb-storage driver.
As a hardware dongle you could certainly build a device that refuses to expose anything besides mass storage ports. A lobotomized hub chip would do the trick.