Interesting.
I regularly download our signed installer often within a minute of it being made available, never noticed a delay.
Maybe it’s very the first time Windows Defender sees a particular org on a cert.
I renewed our cert literally on Friday, tested by making a new build of our installer and could instantly install it fine.
You sure there was no other non Windows default security software on your bosses machine?