99% of our users do not code sign their launchers. Like you said it's not cost effective for anything beyond large scale projects and corporations. You need to bundle your launcher as an installer or zip it and distribute it that way. My launcher has been hosted on mega for over a year and very few people have any warnings, unless they use virus total, which reports do many false positives it's a laughable website
There are open source projects that have been around for over a decade that still get false positives due to a lack of code signing becssue they too can't justify the cost of it. That's an unfortunate side effect of how Microsoft had chosen to "enforce" windows security.
Please be sure to read the documentation. More than likely the answer to the question you are about to ask is there. Let's save us both the trouble 🙂
