Actually exactly this is a pretty dangerous scenario. Just imagine he's really bored/overworked/needs urgently money and inserts a virus into trusted programs that have had false positives before... the impact could be massive. Now of course I'm not accusing him of that and the guy you replied to is an idiot, but the theoretical option still exists. But I guess that's just the risk that comes with using such sorts of programs.