You can disable Webdav, either from IIS (not recommended), or through
the Web Application Policy on the relevant zone.
For example, from Central Admin, Application Security, Policy for Web
application, you can modify the policy for all zones, or create the zone
from where you want to restrict Webdav access. From 'Policy for Web
Application', notice that (all zones) is the default scope for
policies. You will notice the local service (used for IIS caching) and
the crawling accounts. Don't modify these. You can select 'manage
permissions policy levels' from the quick launch on the left-hand side,
and create (add) a custom policy that will deny the "Use Remote
Interfaces - Use SOAP, Web DAV, or SharePoint Designer interfaces to
access the Web site" permission level from a user or group (like
domain\authenticated users). These Application Security Policies
OVERRIDE all site collection policies, fwiw.
Test this before implementing in production. This is not simple and you
can hose your installation quickly without a proper understanding of the
impact