New updates.

web/modules/custom/nodepath_access/nodepath_access.info.yml

@@ -0,0 +1,5 @@
+name: Nodepath Access
+description: 'Prevent users from accessing /node/* paths'
+core_version_requirement: ^10 | ^11
+type: module
+package: Custom

web/modules/custom/nodepath_access/nodepath_access.module

@@ -0,0 +1,3 @@
+<?php
+
+

web/modules/custom/nodepath_access/nodepath_access.permissions.yml

@@ -0,0 +1,4 @@
+access nodepath route:
+  title: 'Allow access to nodepaths'
+  description: 'Allows access to /node/ paths'
+

web/modules/custom/nodepath_access/nodepath_access.services.yml

@@ -0,0 +1,5 @@
+services:
+  nodepath_access_kernel_subscriber:
+    class: '\Drupal\nodepath_access\EventSubscriber\KernelRequestNodePathCheck'
+    tags:
+      - { name: 'event_subscriber' }

web/modules/custom/nodepath_access/src/EventSubscriber/KernelRequestNodePathCheck.php

@@ -0,0 +1,44 @@
+<?php
+
+namespace Drupal\nodepath_access\EventSubscriber;
+
+use Symfony\Component\HttpKernel\KernelEvents;
+use Symfony\Component\HttpKernel\Event\RequestEvent;
+use Symfony\Component\EventDispatcher\EventSubscriberInterface;
+use Symfony\Component\HttpKernel\Exception\NotFoundHttpException;
+
+/**
+ * Class EntityTypeSubscriber.
+ *
+ * @package Drupal\nodepath_access\EventSubscriber
+ */
+class KernelRequestNodePathCheck implements EventSubscriberInterface {
+
+  /**
+   * {@inheritdoc}
+   *
+   * @return array
+   *   The event names to listen for, and the methods that should be executed.
+   */
+  public static function getSubscribedEvents() {
+    return [
+      KernelEvents::REQUEST => 'onRequest',
+    ];
+  }
+
+  /**
+   * React to a config object being saved.
+   */
+  public function onRequest(RequestEvent $event) {
+    $user = \Drupal::currentUser();
+    $user_roles = $user->getRoles();
+    if (!in_array('anonymous', $user_roles)) {
+      return;
+    }
+    $current_request = \Drupal::requestStack()->getCurrentRequest();
+    $path = \Drupal::request()->getRequestUri();
+    if (str_contains($path, '/node/')) {
+      throw new NotFoundHttpException();
+    }
+  }
+}