Interesting comment about releasing source code. I can understand many good reasons to withhold source code but not heard that one before. I would have thought that it would be easier for someone make a new msi that combined your runtime and their malware rather then bother to recompile your source code. But perhaps there is some kind of risk that I have not considered. Am i missing something
I think you are quite right on this point. It would be quite easy, too, to inject code in the binary file and just recreate an installer. Viruses have been doing this for a very long time.
IMO, the only somehow "safe" way to release software is GnuPG (or equiv) signatures. But very few people checks these, or even know how to use them.
Anyway, even if I strongly believe in free, open source software, I completely understand that someone doesn't want to release the source code of a software s/he created, for a lot of reasons. I'm always sad of it in a way, but it's anyone's choice. It's great that this program exists, and it's great that it is freeware.