It’s not, here’s why antiviruses think godot games are bad:
Godot relies on PCK files, All the code is stored in them alongside assets. You can make it 1 file by embedding the PCK file into the .exe.
Some antiviruses see this as a ‘foreign file’ in the .exe, and so declares it a virus. It is not.
https://docs.godotengine.org/en/stable/tutorials/export/exporting_for_windows.htm