Negation is more costly on system performance
If you negate a rule type, extra processing must be performed for every device in a device set. If you choose to use negation in your Device Match Rules (DMRs), consider creating a separate Smart Device Group that stores the result of the negation rule. This allows you to use the DMR in multiple Device Group Rules without performing additional calculations.