I would also like to know the answer to this. There are older posts about older versions that explain this to be the case, but in my own testing it appears the SMTP blocking of a domain happens first before the trusted senders list is checked.
We are on the newest version of SM. *.US domains have been particularly bad of late in regards to spam - it would be nice to be able to lock that down with exceptions.