A user does not actually even need to have a Premium license to run unattended desktop flows if there is a Process license assigned to an environment. Essentially, any user having access to the environment will actually be able to run unattended flows.
The best way to prevent it is to have a separate environment and simply not add users that should not be able to run those flows to the environment. This is especially true if you want to have some users with Premium licenses (i.e. actually running desktop flows). As far as I know, you cannot have a permissions setting that would allow running attended flows, but prevent running unattended flows.
-------------------------------------------------------------------------
If I have answered your question, please mark it as the preferred solution. If you like my response, please give it a Thumbs Up.
I also provide paid consultancy and development services using Power Automate. If you're interested, DM me and we can discuss it.