Yes, it is signed. The MSIX bundle carries a Microsoft Azure Trusted Signing certificate, so Windows verifies the publisher before it installs anything and SmartScreen does not flag it. The package is around 100 MB. If your browser or Windows ever shows an unknown-publisher warning for a file claiming to be MFLink, it did not come from this page - download it again from here.