I run myself latest stable/beta Windscribe clients for Windows with CSAV on other 3 machine and no alerts from Cylance. Even by manually updating, that doesn't sound normal behaviour to me. Are you running Windows Insiders builds or something? That would be my only explanation. Otherwise, I would be cautious and think twice before re-safelisting those files.