Hi,
Rules associated with a profile have precedence over rules in "effective in all profiles". Therefore a single rule "All applications deny any connection" within your "Untrusted" profile should deny any outgoing connection if the "Untrusted" profile is activated.
Rules associated with a profile have precedence over rules in "effective in all profiles". Therefore a single rule "All applications deny any connection" within your "Untrusted" profile should deny any outgoing connection if the "Untrusted" profile is activated.