Unfortunately I think this is because I haven't signed the executable. I've signed the Mac executable (as I already have an Apple dev account), but the Microsoft process seems to be a bit more involved and requires an expensive EV certificate. I'll look in to this further, but I can't promise anything.

Usually downloading the app as a dotnet tool doesn't get flagged as a virus, but it seems this isn't always the case.