The criminals will try everything. That's why I do not talk about specific things they do, as it changes. Like the thing with the comments you noticed. And yes, what you linked is a fake. And it is hard to spot at a glance.
Merely downloading in theory should not pose a risk. Depends on the circumstances. I do not really use the Itch app. Downloading a zip and even unzipping it, poses near zero risk. You still might mistake the file for another file and accidents like that.