I'm the type that downloads a few hundred games a year from Itch. There are red flag projects, like no art, people in the comments saying "dude, it's a virus." There's only been one game that my 2 (or 3) antiviruses labeled as a virus. It was quite a popular horror game too, from a group that had made several popular horror games, so I assume it was a false positive. I've worked on a project that registered the game a false positive, because there was a version checker to let players know if they had the most current version.