Intune App Control and Gorelo

One of our clients need a somewhat strict app control policy, basically its a school, we want these students using the laptops for school and nothing else. Im looking into Intune's app control policy and it looks like for best practices I'd need to install gorelo via Intune managed install vs. script. Is that something that I can do? The how-to just shows how to do it as a script