This seems to me the system is working as intended and spreading out the Default trust as opposed to having it be a core group.
It's not flawless though, there are for instance still 4 banned users on DT2:
Wouldn't a simple solution to this be that if you're banned you're no longer eligible for DT1 and DT2?