In some conversation with Apple folks, the XProtect update that caused this has been rolled back it should be installed silently. It should also be possible to force an update via: softwareupdate --install --include-config-data XProtectPayloads_10_15-133