Is that a serious question?
If I enable an option (and apply it) I expect that option to still be enabled when I next restart the device.
As it stands, in the dialogue, Real time protection is not enabled.
If it is not enabled, it is disabled.
I want it enabled when the device starts.
Is that clear enough?
While we are at it:
It would be nice to see a log of
a) Db Updates performed (I have it set to update daily)
b) Scans performed (with or without finding anything.
At the moment ClamAV on Tos is some nebulous artifact we are supposed to believe in.