Are you getting this by way of the app store? Apple uses other developers for some of it's security updates. As most threats come by way of the internet and thru websites. Have you ever visited a web site and got a popup that said this is not a trusted website. This is your security software working. In keychain there are certificates that are stored for trusted websites. And some times you will, when browsing get a popup asking you to allow this website to use your location.