I will just leave this here, as a future reference.

Apparently, when you try to make add an exclusion for the Windows Defender in an Azure Batch Pool node during a startup script, Microsoft will flag it as malicious. ¯\_(ツ)_/¯