I have done all of the recommendations and periodically find after reboot that VBS is running again.  The only thing I've been able to do after VBS is magically re-enabled is to use Microsoft's DG Readiness tool to re-disable VBS;

To Disable DG/CG.
Usage: DG_Readiness.ps1 -Disable

I downloaded the latest version Readiness Tool Version 3.6 Release.

https://www.microsoft.com/en-us/download/details.aspx?id=53337