Could you handle this with the internal Discourse trust system? Move them back down to TL0 and lock their level there until such time as they reinstate their subscription? I think there’s some CSS styling options available on the username information for people at TL0, or at least default group membership.
You would also obviously want to restrict your content categories to TL1+.