I think the most annoying thing about the MS AV in Win10 is that "allow on device" doesn't work. It treats things like VNC as "hacking tools", but 1) if you're not fast, it'll automatically quarantine them before you can allow them, and this includes just after restoring them from quarantine 2) it doesn't propagate that allow to volume shadow copies, so redetects it there and then fails backups.

It's 2022 and AV remains an absolute curse.