A DLP policy with multiple DLP rules, not working as expected

I have an endpoint DLP policy that targets all users and specific sensitivity labelled files, and I have created multiple rules with different actions.

Rule 1, block restricted apps from touching these files.

Rule 2, block with override if a user attempts to print these files.

Rule 3, alert if users copy these files to a USB or network share.

In each rule, only the specific action is enabled, and all other actions are disabled. The result is restricted apps get a block notification (it's the highest priority rule), but all other activities just generate an alert, so the block with override on printing doesn't work.

I reviewed the policy reference page and for endpoints it says the following...

When an item matches multiple DLP rules, DLP goes through a complex algorithm to decide which actions to apply. Endpoint DLP applies the aggregate or sum of most restrictive actions.

Based on this I went back to each rule, enabled all of the other actions being targeted by the policy (restricted apps, print, USB, network shares) but left them as audit only. The thinking being, every rule will match, but the rule with the most restrictive action will apply in each case. I then tested again and I now get the block with override popup when I attempt to print, but unfortunately, my restricted app (Dropbox) testing now fails and the file is synchronised to the cloud, where it was blocked before.

I could potentially have them in a single rule, but any notification would have to be worded differently because it would apply to both the block and block with override popup.

What am I missing? Any help is appreciated.