The Deco M4 will instantly terminate that device's connection. Even if the user knows your Wi-Fi password, their hardware MAC address is now blocked from routing data through your mesh nodes. How to Unblock a Device
If you want to filter by MAC address but only during certain hours (e.g., block the kids’ iPads at bedtime), use Parental Controls. mac address filter on tplink deco m4