1) I'd suggest adding a warning when a user enables "Learning mode", to warn that that user should be certain the system is free of malware programs, otherwise malicious programs may be added to the whitelist. Potentially with an "Are you certain?" prompt that defaults to no to avoid users from enabling it without actually reading.
2) Add a learning mode toggle (with the same suggested warning when selected) to the "Trust All" pop up, that way a user doesn't have to navigate into settings to enable learning mode.
3) Add warning text to the "Trust All Mode" pop up prompt about malicious processes, otherwise users may not fully be aware of the consequences of enabling the trust all mode.
