Gonna copy paste my reply to the person below with one minor addition because I think it's a good idea to reply to this too.
A mod just confirmed that it's *definitely* a false positive, since clangen isn't verified officially it apparently is a pretty common thing (they aren't verified because it takes a lot of money and paperwork). They encourage people who are still worried to view the code and see for themselves.