Yes, this is already (mostly) possible, just disable PMs in site settings, because staff can always PM no matter what.