Dynamic query exclude security group

Hello, I have multiple dynamic queries that I utilize for deployment tasks in Intune.

One specific query categorizes machines based on whether their hostname starts with "M123" and then assigns them to a security group. I've also implemented an exclusion to ignore specific hostnames. However, this process is cumbersome as it requires manual modification of the query each time a machine needs to be excluded from the dynamic group.

Is it possible to utilize a security group instead, thereby eliminating the need for manually specifying excluded hostnames?

Please refer to my query below. The query adds all machines starting with "M123" into a group but excludes M123456, M123789, and M123101:

((device.devicePhysicalIds -any _ -eq "[OrderID]:M123"))-and (device.displayName -not In ["M123456", " M123789", " M123101"])

Any tips would be much...