Well, I don’t think our antivirus would let that through anyway. But the reason we wanted an .exe is also because then I could pack it as Intune-deployed package and make it available for the users that work on the thing it’s automating (there were still some manual steps needed in the process).

Deploying an in-house built .exe solves the problem of the .exe not being certificate-signed, so things like SmartScreen stop blocking it.