According to MS there are various validation steps when app is added to repository, including virus checks:
Each submission to the Windows Package Manager Repository is run through several antivirus programs. These programs all have different virus detection algorithms for identifying potentially unwanted applications (PUA) and malware.
Wait Winget is a user repository- as-in it’s completely unpoliced? Hahah I stand corrected
According to MS there are various validation steps when app is added to repository, including virus checks:
https://learn.microsoft.com/en-us/windows/package-manager/package/repository#validation-process
So I guess it’s safer to install apps trough winget, at least as much as much You trust Microslop doing good job.
In my case that’s not at all, but I learned something today, thanks