In some conversation with Apple folks, the XProtect update that caused this has been rolled back it should be installed silently.
It should also be possible to force an update via:
softwareupdate --install --include-config-data XProtectPayloads_10_15-133