Quickbooks -vs- Cyber Essentials certificate compliance

Every time there is an update to Quickbooks desktop the installer changes program files folder permissions to "Everyone". This is then flagged by the network security monitors as a vulnerability. We could fail our Cyber Essentials audit due to this. The exact prompt from the security monitors is:

"Path: c:\progra~1\intuit\quickb~2\qbdbmgrn.exe
Used by services: QuickBooksDB34
File write allowed for groups: Everyone (S-1-1-0) Full control of directory allowed for groups: Everyone (S-1-1-0)"

We then need to update the folder permissions manually to every time there is an update.

Can someone please advise how we can fix this issue permanently? Surely Quickbooks must have policies to keep the software secure. Giving access to Everyone on a server to a folder with an executable that is accessed by a Windows service is a serious vulnerability. A malicious user could replace the executable (since they have access to the folder) and to a lot of damage.