That's exactly what's happening.
It's not under investigation. As I often use a VPN Itch's security software has flagged it as "potentially suspicious".
Seems rather silly on their part as I have the two factor authentication enabled.
I've tried contacting them about about, but have received no response.