Is there a way to automatically lower a trust level

Exclude doesn’t exist, but why can’t you achieve the same result with explicit include permissions?

Trust levels aren’t a good solution here.