Yeah that's just since there is no officially recognized publisher developer or other software company that has signed certificates or whatever with microsoft. As long as you downloaded it from itch it should be fine and dandy.
You can mess with your computer's security settings to allow you to play the game, don't worry, no matter what grandma tells you BloodbornePSX isn't a virus.