I’d simply change all of the category permissions to staff only. With a nice explainer somewhere (of course).
You might like to do a data explorer query to record your existing permissions first, and if your forum is large/complex maybe do it all from the Rails console as a bulk action.
That would achieve what you need. And you could reveal content as it is cleaned up, category by category.