If you allow users to VBS scripts located in \ProgramFiles, I suggest to move the PSADT temp file location in the XML to \ProgramFiles\
I explain why here: Microsoft Defender "Suspicious Scheduled Task Launched" - #3 by Axelo2
You might want to consider allowing users to PowerShell scripts located in \ProgramFiles, too.
FYI: PSADT authors want to remove VBS from PSADT. VBS has been deprecated in Windows 11.