Some Windows players report that Windows SmartScreen complains about the SMAPI installer:

Look into code signing to prevent that.

I did a quick bit of research, and I don't think code signing is a good fit for SMAPI's open-source development. We'd need to pay an annual fee, and the signing certificate would need to be kept private (which means only one person could build SMAPI releases). Closed as won't fix.