“the Combo update reverts XProtect and other configuration files to those which came with that update” Posted on November 4, 2018 by jgordon Link. Yikes. What an obscure problem. See post for workarounds.