Our Phish Reporter Addin is not being able to report on mobile with Conditional Access with Edge

We have a client using our Phish Reporter Addin on mobile and they have Conditional Access with Edge as below:

• Include: select Office 365
• Exclude: Our Phish Reporter Addin

The Problem:

The Conditional Access policy includes "Office 365" as a target resource, and since our Phish Reporter is an Office 365 add-in, it's still being caught by the policy even if we exclude "Phish Reporter" specifically.

Could you please confirm our assumption are correct?:

• Office 365 add-ins are considered part of the Office 365 service
• When we include "Office 365" in a Conditional Access policy, it applies to ALL Office 365 services, including add-ins
• The specific app registration ("PhishReporter") exclusion doesn't override the broader "Office 365" inclusion

And please advise solutions to exclude our Phish Reporter from the Conditional Access. Thank you.