Is there a way to prevent a function to be called from smart contracts / only allow calls from EOAs ?

msg.sender == tx.origin

Does that cover everything? Such as the call coming from a contracts constructor?

just ask anyswap, there is a request form, then you add liquidity to their router and finish is the bridge

cool