New Blog Post | Exclude Public IP addresses in Azure DDOS network protection

Is it the right understanding that now I can exclude some public IP address from DDos Protection plan ? Wondering wont that be a backdoor entry for attackers. Will you please help the use cases that I need to consider