Cloud App Security allows you to turn off the inbound part of inline protection for Exchange Online without deprovisioning the service account for inbound protection.
When Transport rule is disabled, emails will not be routed to Cloud App Security for scanning, which in effect turns off inbound protection.