I encourage you to read that entire doc as it has received some fantastic updates over the last couple of months

If you do have to create an exclusion for an app, you can add back some protection to directory information using Filter for apps:

learn.microsoft.com/...