The executable was exported from the Godot engine without a code-signing certificate.
Code-signing certificates are paid services provided by authorities like Microsoft, and without one, Windows labels the publisher as “Unknown.”
Some antivirus programs automatically flag such unsigned executables as potential threats.