Most, if not every, game on itch.io does this. It’s because the publisher is unknown to Windows, meaning they don’t have some kind of company or LLC to represent them to Windows, so it automatically flags the file as malicious.
If you make a game and put it on itch and download your own game that’s been zipped, unzip it and try to run it, the same notification will show for the game you made yourself.