Microsoft defender system guard

Question

Hello,

I need some help about VBS and other security features.

I recently asked a question how to enable VB on this forum and I got this answer: https://learn.microsoft.com/en-us/answers/questions/2109017/virtualization-based-security

I followed the instructions and tried the configuration in a VM (I attached a screenshot of the group policy so you can what options are enabled) and while somethings changed, I still see the microsoft defender system guard as disabled and I cannot enable it as it is managed by the administrator (I asume it is the group policy about VBS).

My questions are:

1. Why microsoft defender system guard is disabled?
2. how can I enable it?
3. is it connected that I am doing this in a VM, if I do it on my laptop maybe it will activate also this feature?
4. do I need to enable something else in group policy?
5. did I correctly configure the group policy (screenshot attached)
6. Should I enable all this vbs features in group policy? Are there any downsides?

Thank you for your help.