Hi Tom610,
thank you for sharing your feedback and opening this conversation up.
First, let me apologize for any bugs impacting your experience with the Hub. We could have done a much better job here, I have to admin.
When it comes to the specific bug you mentioned (CBC-18046), I am personally aware of it and I know it takes us a bit longer to fix than expected due to the complexity of the fix. The latest status is that we have a solution and our testers are validating it. It should be resolved very soon.
In terms of the Alert category, in fact, we have disabled one specific alert, not the whole category of alerts. As you correctly said, we could make it work right so we decided to disable it for the time being as it was generating more false positive alerts than true situations where a person or a malware would disable any of the running shields. Also, our decision was supported by two facts. (i) modified shields are automatically put back into their intended state every few minutes when synced with the policy is done and (ii) the UI can be completely disabled for end-users so that those shields cannot be modified manually.
We are planning to enable this specific alert as soon as we can make it work right so it doesn't create frustrations.
I hope this helps.
Best, Pavel