Uploaded files are scanned for malware on the server side, but malware scans are unreliable. I think itch.io staff has to intervene and confirm.
