Galaxy S8 with work profile. Normal profile shows Play Protect certified, but work profile not?

So...yeah. Just this issue. My ancient trusty S8, which has been with me for quite a few years, is my BYOD work phone. It has been for a while, too. But seems now it's not compliant with the company policies. After some checking, it seems the Play Store is reporting (settings - about) not to be Play Protect certified. But the normal profile is certified! WTF happened, and how can I fix this?