While I completely and emphatically understand that small developers (and particularly indie developers) don't have the resources to interface with the myriad security vendors out there, the "Trust me" line of advice is actively harmful.
When you tell users to ignore the safety mechanisms in place because you swear, it's totally legit, it makes it so much easier for someone else to exploit those users. Honestly, keyloggers and trojans have been hid in fan works before - And one of the most prevalent Discord scams invovles the attacker getting the victim to install malware under guise of being a game in development.
"Oh, yeah, ignore the warning. False positive," has gotten so common that people pay no mind to any security red flags.
It muddies the waters considerably, and it makes me deeply nervous for my own security when I'm expected to follow this trend.
I dunno. I don't have answers. I'm just rambling.
