From my limited digging, it appears that Godot games are trivial to decompile, meaning some douchebag can download the game, decompile it into a package, re-export it as a web version, and then host it on their shifty site named after another, legitimate site. I found another one that didn't know Cloudflare's WHOIS privacy still shows your general location, and turns out they're based in China. Go figure, the place where IP law goes to die.