The “Application Blocked” mechanism is necessary but poorly communicated . It stops real threats effectively, but lacks transparent resolution paths for trusted software. Improving user messaging and adding a “report false positive” button directly in the block dialog would dramatically reduce frustration.