FPC used UPX a while to compress all binaries, and it was a never ending source of trouble. Antivirus, but also some PE functionality simply not or faulty implemented, trouble with EXE programs that provide traces, resource hackers etc etc.
UPX Antivirus trouble comes in waves. It might be ok for a while, but if you do it for a decade, you will have seen several flare ups.
And in practice all people will put the few MBs of EXEs on a 100GB HD, SSD or flash card anyway. Not worth the trouble.
In the end we simply removed the upx-after-build support from the buildsystem. It was a remnant of pre-2000 MSDOS times with 240MB harddisks anyway. The few people doing retro work can UPX it themselves.
yeah.
But you can add a Exception in the Anti-Virus-Setting's.
Or spend 2 hours with a customer on the phone trying to convince him that you don't work for CIA because "you sent him a virus". And that was 15 years ago, nowadays paranoia and conspiracy theories have been dialed up significantly compared to then.