It would be a browser restriction and does not require host checker.
We have the function to check for specific OS version and provide remediation steps, but there is no feature to block all device from a specific OS (i.e. block all iOS devices).
We create host checker policies for the OS that we want to allow. If we don't want that OS to connect, then we leave that section blank. It works for us.
