Windows Sandbox "Virus & threat protection settings" all off & disable

Got the 1903 update a couple days ago and fooling around with Windows Sandbox. A few minutes after powering it on, I got the notification, "Turn on virus protection." I click on it, and I get:

"Page not available

Your IT administrator has limited access to some areas of this app, and the item you tried to access is not available. Contact IT helpdesk for more information."

So I contacted myself (this is an ongoing, multi-decade inside joke at Microsoft), and I told myself to open up Settings and see what's going on. I found that everything looks normal under "Windows Security -> Virus & thread protection" with everything at "No action needed," but when I click on "Virus & threat protection settings -> Manage settings," everything is switched off and disabled from being switched on, explained by the red text, "This setting is managed by your administrator." These things include "Real-time protection," "Cloud-delivered protection," etc. Moreover, there is no "Scan with Windows Defender" in context menus.

Am I missing something here? The main thing besides isolation I want in Windows Sandbox is real-time protection! In addition, I've spent half a frustrating day trying to learn all about Hyper-V because enabling Sandbox killed VMWare Player, which Microsoft failed to warn me about when I enabled Sandbox. And the end result appears to be completely worthless. What the heck. Seriously.

The crackling audio I got in Hyper-V reminded me I played around with it a few years ago and found it lacking in this and other areas compared to VMWare. Nothing has changed. Back to VMWare it is! My biggest complaint about VMWare is that file copies in and out of the VM go through the temp folder. Hyper-V doesn't appear to do that, but it's also very slow at 20 MB/sec or so.

Another reason I couldn't use Hyper-V was the fact its virtual optical drive doesn't support bus encryption. VMware's does. I thought I'd be able to simplify my life a little bit, but noooooo, I just wasted a lot of time. To mitigate VMware's less than reliable copy/paste and drag/drop file transfer, I just set up a shared folder in the VM for that. Seems to work faster and avoid using the temp folder as intermediary on both host and guest. For those rare times I could use a sandbox, I can simply copy a VMware VM for that. BTW, for anyone who may not know, to turn off Hyper-V and go back to using VMware and presumably Oracle, executing this command at an admin prompt is the ticket:

bcdedit /set hypervisorlaunchtype off

To resume using Hyper-V, it's:

bcdedit /set hypervisorlaunchtype auto

You have to reboot after each. Got it from here:

Dixin's Blog - Run Hyper-V and VMware virtual machines on Windows 10