Consequences of using or bypassing Trust Levels for company/organization staff?

As long as the users are vetted, you should be OK. I would not give people trust level 2 though, TL1 should suffice.

Note that in 1.4 we changed the defaults such that TL0 can post one image by default.