Please let me explain my concerns:
- For the ones lets say “just get it run”.
- You know how we all read documentation

- non native speakers
I have a proposal at the end. Maybe you consider that valuable for the Docs. I’m not a native speaker… hope it’s understandable
Let’s go to the referenced site from Microsoft:
at the top a prominent statement on the general impact:
Caution: Adding an exclusion to Windows Security means that Microsoft Defender Antivirus will no longer check those types of files for threats, which could leave your device and data vulnerable. Make sure you really want to do this before you proceed.
and at the process exclusion another one
Tip: It’s recommended that you use the full path and file name to exclude a specific process. This makes it less likely that malware could use the same filename as a trusted and excluded process and evade detection.
The Hugo section on that:
Virus scanners are an essential component of system protection, but the performance…
And later:
Before building a site, your virus scanner has already evaluated the files in your project directory. Scanning them again while building the site is superfluous. To improve performance, add Hugo’s executable to your virus scanner’s process exclusion list.
and a brief “How to for Defender”
This could be easily taken as:
Just do it - It’s safe
skipping the discussion for why and what could be insecure…
So I would rather add something like
Virus scanning
Be vigliant
Virus scanners are an essential component of system protection. Fiddling around with these settings may harm your overall system security.
So only do this if you are aware of the impact and are willing to take the risk.
Applications like Hugo that frequently read and write to disk may be heavily affected by the permanent scanning of the accessed files. For example, with Microsoft Defender Antivirus, build times for some sites may increase by 400% or more.
Before building a site, your virus scanner has already evaluated the files in your project directory. Scanning them again while building the site is superfluous.
Most Virus scanners provide options to skip dedicated folders or applications while scanning. You could for example create an exclusion for the hugo binary executable.
- the example for Defender here
We recommend to use the full path to the executable to lower the security impact.
Other virus scanners my have similar exclusion mechanisms. For details please refer to your Virus Scanner documentation.
A user may have no idea where the executable resides, particularly if installed with Scoop, Chocolately, or winget.
And explaining how to use where.exe isn’t going to happen.
imho especially for those it is a good idea to exaggerate a little.