Why does macOS ask me to approve a profile?

When you turn on Protection, the app installs a DNS configuration profile - that's the mechanism macOS provides for pointing the system at a secure (encrypted) DNS resolver. macOS always asks you to approve profiles manually in System Settings; that prompt is expected and is a security feature of macOS, not a warning about the app.

To remove it later: System Settings → General → Device Management (or Profiles), select the AI CleanWeb profile and remove it. Protection stops immediately.