Some AVs do not register themselves with Windows Security and allow Defender to be run along side them. There should be an option to whitelist these so that the managed AV pages does not report endpoints with coexisting AV as an error.