How Can I Exclude a Trusted App That Has a High Risk From Our App Policy?

First, you need to sanction the app/apps you want to exclude. Next, edit your app policy and check the "Unsanctioned App" box in the "Trust" column. This will only apply the policy to apps that you haven't sanctioned.