Can I Keep Nofollow for All User Links, Including from Trust Level 3?

Sure.

https://meta.discourse.org/t/spambots-keep-taking-over-my-forum/17454