...
To exit the flagged state, you must perform the command "/system/device-mode/update flagged=no", but you can only permanently exit flagged state, if you have completely removed the malicious configuration rules that triggered it. If you try to remove flagged state, but after the reboot procedure your device still has the config which triggered it, the flagged state will automatically be set again.