We're seeing a similar issue onboarding Sophos onto the end user's machine our process if manual.
1. Enroll via enrollment string
2. Wait for PPPC to be pushed to the machine
3. Install Sophos
Once we install Sophos we still get a message like the above for a system extension that's made for Network Filtering even though we've added it to System Extension config in profiles