Use case is to allow techs to manage the majority of our Orgs. Which can be done by adding the user at the Account level. However, that will also give access to our internal Org.

Being able to exclude specific orgs from users at the account level will be helpful. Otherwise, we'd have to create users per Org.