Yes, you’re right. Technically, this is because the boot-time scanner has no access to the storage where the global exclusion list is kept…