It's just windows defender's !ml thinking that the program is a virus because godot accesses their URL for some checks and a few files, anything that does this without a certification gets flagged.