Just getting this formally flagged as discussed with the UK team already. there are alerts being flagged for "Real time protection disabled" being generated on my home machine, at what i assume from the timings to be during the shut-down process. I will speak to the team to get access to logging tools etc. to investigate this further.
A side effect of this however is the fact that overnight 23 -24/05/2013 UK time for each of these alerts I received multiple messages to my email account telling me of each of these alerts. The first 2 times i was replicating the issue I received 4 alerts and the following morning when deliberately stopping the service to trigger the alert I received 2 messages. I will update this with regard to the multiple messages received as a result of the tests during this investigation as I would think that getting a mailbox flooded with what effectively becomes spam is going to deprecate the value of this feature.