> Countdown to some 0day no-click exploit that adds an app or service or site to the exclusion list and then proceeds with a further attack? What type of explo

> Countdown to some 0day no-click exploit that adds an app or service or site to the exclusion list and then proceeds with a further attack? What type of exploit would be able to add something to the exclusion list but not already perform arbitrary code execution and just attack the system directly? This seems incredibly unlikely -- and roundabout, because you'd still have to get the browser to load the page.