Thanks for this post, @Jim85
I was not aware Microsoft was doing this; will have to check it out further for myself.
From what I understand, if you upgrade from 7/8/8.1 to 10 in-place, you won't be
forced to use
Microsoft driver signing, so that might be your only workaround for a fresh Win install (if it happens to be problem).
I'm not an Avast expert, but I would say with confidence that it would have a Kernel Mode driver (filter) and it
would be signed, but probably
not by Microsoft.
I'll look around and see it this affects only fresh installs of Win10 1607 build. It could be previous builds that are upgraded are not affected either, and so could be another workaround. Haven't found any completely clear info online yet