Local exclusions are always over-written by EPO on a policy refresh unless you untick the
How to handle client exclusions:
section with the EPO policy.
It's possible that this setting has been reset to 'ticked' when you checked in the patch 4 management extension.
None of my policies have that box checked. And I know they weren't checked previously either.