The first thing that happened when I enabled this, is that VMWare Workstation (a signed app that passes smartscreen stuff) was denied access to its data folder in the documents folder. No notification from Windows.

Not a good first impression, and I don't really want to learn the file access patterns of all the things I use.