My friend just got pwned by a malicious itch.io game a few days ago. They didn't reply to my report, but seemed to have taken it down after a couple days.
Later versions of windows 10 and up has a sandbox feature (https://learn.microsoft.com/en-us/windows/security/threat-pr...) you can enable to run random exes, also advised you keep a free malware scanner active etc. I resurrected an ancient piece of hardware recently and in the hunt for drivers these were key.