Can you elaborate a little more?
I just tried uploading an AVI from a trust level lower than the one defined in the restrict to trust level theme setting and it prevented the upload as expected.
If you would like to prevent non-staff users from uploading AVI files specifically, you should ensure the AVI extension isn’t added to authorized extensions. You can add the extension to
authorized extensions for staff if you want staff to be able to upload AVIs.