So…yeah. Just this issue. My ancient trusty S8, which has been with me for quite a few years, is my BYOD work phone. It has been for a while, too. But seems now it’s not compliant with the company policies. After some checking, it seems the Play Store is reporting (settings - about) not to be Play Protect certified. But the normal profile is certified! WTF happened, and how can I fix this?
So…Thanks for the comments. In the end, deleting and re-creating the work profile worked, and the account is now Play Protect Certified again. Not sure what the problem was.