Thanks for the feedback! The download page does have exe signed with certificate but MS would still flag that on smartScreen when testing on other computer so UX wise I worry that new user will think this installer is sus. Do you have any pro tip+ to help this? I've searched and it said even using MS Azure certificate sign on exe don't lift windows SmartScreen so MS store was our best try so far but we could really use some advice.

I never get bothered by SmartScreen, maybe I turned it off.