Well - the reason full trust forms are sometimes a concern is because they can have code that can access all kinds of local resources. I can understand a policy that doesn't allow them. What is it you need to accomplish that requires full trust? I'd guess the only argument for them would be that the business need outweighs the risks.