I can make it so TL0 cannot upload images, but how about preventing them from embedding as well? I feel like the answer if obvious, but I can’t figure it out 
Search for min trust to post in settings and you should have two settings to adjust in trust levels.