That’s pretty normal in my experience. That’s why you check with VirusTotal instead of a single “mainstream” scanner.

In reality, if Microsoft Defender (Security or whatever the name is) can detect it (which does in this case), it means it is flagged on most target users' machine.

Of course, there are people who disable built-in security scanning and don't use another antivirus software, and that's on them.

Unfortunately Defender also flags lots of non-malware open source software, which trains users to ignore it.

Example? Personally I have not run into a single such false positive for the past 10 years. Microsoft SmartScreen sometimes shows a warning for executables that are not digitally signed, but that's not Defender, and this is nowhere like flagging as a virus.

qBittorrent which is a reputable and popular torrent client used to download linux isos, gets flagged and removed as "potentially unwanted applications" by windows defender.