I think naming should be changed as its confusing. I thought Moderate will be light protection & will block few but its opposite.

And I think when excluded the program should be Deepscreened once.

How much time the alert remains before it disappears?