Thanks for the heads up! I’ll take another look at seeing how I can verify/sign the downloads with microsoft.
(For the record, that exe.lnk just opens the game with some extra commands to show the console in an external window while running — if you’re concerned or if Defender keeps hassling you about it, you can leave it un-extracted or delete it and the game will still run fine normally.)