Hello, currently any vendor trusted via the Trusted Vendors List (TVL) will automatically be excluded from detection by the AV. While that is nice in many ways, and will certainly help cut down on false positives (especially for Windows files), it also means that signed malware may not only be allowed complete access to your computer, but will also be excluded from being detected by the AV.
While this is a trade-off, which provides an undeniable increase in usability at the expense of some security, I personally am okay with it. Of course I would also like it if they incorporated my other wish, which can be found here. 
However, I realize that there are many out there who do not believe this trade-off is worth it.
One good thing is that V6 will have an option to disable using the TVL entirely. However, certainly there are many out there who would like to use the TVL, to drastically cut down the number of Defense+ alerts they will receive, but would still like the AV component to alert them to any dangerous files it finds.
Thus, my wish is for there to be more fine grained control in how the TVL is used. Instead of an option to disable it entirely I think there should be an option to disable its use for Defense +. Then I think there should be a separate check-box to disable its use for the AV.
Please let me know what you think of this idea.
Thank you.