Broadly there are two wrong assumptions in your questions
a) Apps have referrers - not really. A "referrer" is when I click a link and end up at your tracked property. No link on the web will lead me to the screen of an app.
b) Referral Exclusion will filter referral spam - again, not really. The purpose of the referral exclusion list is to maintain the original campaign source and in doubt that defaults to direct. Entering referral spam urls would not make them go away, it would merely attribute them to the wrong channel (direct). They would still inflate the number of sessions and pageviews. You would use filters (e.g. exclude filter on the referring url) to filter out spam.
Happily this also means referral spam is not a problem when you track an app.