Odd. Repeating the actions again, now Defender is not whining.
I swear my last experiment was after a full reboot (for installation of the updates). Perhaps the updated security definitions took additional time to install?
EDIT: Added emphasis. Also, running an explicitly-triggered scan against the .exe file now, nothing gets flagged.