Exclude/Allow Particular non-managed devices from Conditional access policy without enrolling

This will not work, the device needs an Entra Registration for the Conditional Access conditions to work, so you are unable to create something specific for a unknown device and logical so, in my opinion. You could for example exclude certain network segments from a policy, but this is not close to what you are looking for..