I had this with a VSTO MSI package I was developing a few years back. Had to submit samples to Microsoft who whitelisted it fairly quickly. This was an EV signed package.

Only components packaged were Microsoft provided!