This only enforces it where you have the hook installed. And it cannot be pre-installed on people who have newly cloned the repo.

Which makes it nearly useless. Not totally - the people who know about it benefit - but it's extremely far from safe. The only way to really enforce this is to add this kind of thing to your "main" remote repo that everyone pushes to.