Just fixing a small misconception, two users from DT 1 can only remove a user from DT 2 and below(taking into consideration that only one DT 1 user has the individual under their trust list)

DT 1 individuals can only be removed by theymos, i.e by deleting their "entry" from the trust list of DefaultTrust(which , is actually an account)