Can I somehow enforce that convention plugin with defaults is applied everywhere? (Other than

subprojects

block)

You can apply it via a settings plugin with

settings.gradle.beforeProject

is that isolated project safe and all that stuff?

Yes