I set cleanup on paste to true, and I removed figure and figcaption from “Allowed block tags in paste”. But all figures are still pasted with all attributes and all enclosed code.
My other experiments with restricting the allowed block tags so far were successful, though.