Tor Messenger build process should upload builds to virustotal
The Tor Browser people had periodic problems where every new build would trigger a false positive in some virus checker. I think they improved the situation by uploading all their builds to virustotal (and maybe other places?), as part of the build process, sufficiently before release that the virus checkers had time to calm down.
It sounds like Tor Messenger should add this step into its build process (and its build process document) too.