It looks like this is something that happens sometimes with either Godot builds with embedding the project all into the exe (which is how I export mine to keep it tidy), or an issue that sometimes occurs with using 7zip to make zip files (which I also use). I have updated the files to use Windows built-in zip tool and it seems to have cleared the windows defender error.
I also scanned the older copies of the game I used for testing and checked those too. Surprisingly they didn't get flagged, nor did the exes of the versions published to itch once they were unzipped; even though the zips showed as a threat.
It looks like this may just be a false positive from the antivirus, but I don't want to leave that to chance, so I've updated the files so they don't trigger. You should be good now.