The new CIS safe mode is very good, it allows running of CIS whitelisted apps without Prompts.
this is really good, as i hardly remember I had ever blocked D+ alert for Commonly used (aka CIS whitelisted apps). in fact in previous version I had pateintly answered all ALLOW.
Though i had BLOCKED several times network access for many apps .
this sielently allowing whitelisted apps in safe mode is good and desirable feature but leads to a feeling of something more wanted.
so I suggest that a alert similar to sandboxed alert with logging in D+ logs for CIS whitelisted apps will fill the vaccume of feeling helpless.