Apple suggestion: After two to three weeks, offer a checkbox to 'always allow'. This gives time to either accept that it's running and going to be monitoring, or remove it if it's malware.<p>This would be similar to another case: how Apple handles registering devices manually into an Apple Business Manager account for their MDM Device Enrollment Program. "If the device is given to a user, they have a 30-day provisional period to release the device from Apple Business Manager, supervision, and MDM."<p><a href="https://support.apple.com/guide/apple-business-manager/add-devices-from-apple-configurator-axm200a54d59/web" rel="nofollow">https://support.apple.com/guide/apple-business-manager/add-d...</a>