We have no way of setting a safe policy in ThreatLocker to permit this update, due to the MSI being unsigned and being called by MSIExec.