Microsoft recently published an Update for Intune. This update brings a default scope tag label. This label is automatically assigned to all un-tagged Intune objects that are capable of scope tags.
How does it look like?
With this new behavior, you can hide all Intune objects to users without the default scope tag labels.
You can see the difference in two screenshots:
Please also have a look at my blogpost to learn use scope tags: