The problem here is that for SQL Server versions prior to 2012, the exclusion is done where only one session is excluded by the extended events collections.
However, Spotlight makes at least two connections to SQL Server. So, there can be multiple sessions which means data can still be collected for those other sessions. This is a limitation imposed by the fields available in extended events in those older versions of SQL Server 2008 R2 and below.
In 2012 and later there is an application field that we use to exclude Spotlight data and this excludes all sessions started by Spotlight.