Technician client blocked when Intune/MDM policies applied

This is a minor annoyance but I have a client laptop that has M365 security policies applied via Intune/MDM - they do things like ensure the laptop is encrypted before one can access their company resources. When I launch the technician client, I get blocked messages like this:


Unblock three times and the client loads so it’s a hassle more than a problem. I don’t know much about this aspect of M365 (on list to learn more) but interested in why explorer.exe is being blocked?