Yes!! It actually is like 99% complete. I have been rigorously testing pushing data to the Arduboy to make it as safe as possible. As soon as I'm confident that it's safe, I'll release it the same way as the PC version.
Yes, it is a false positive, but should be a quick fix. I think it's because this version has debugging enabled. Turning that off should get rid of the false-positive.
I don't want this to become an open-source project because I see it having a definite end whenever I put a little more work into it. It's supposed to be simple and self-contained. With that being said, I'll be glad to let you or another moderate audit the source code for anything suspicious. I've got nothing to hide. This software is ad-free, malware-free, and safe.
I'm working on getting pics for all the games as well as including more games. As for uploading a .hex file, dropping it into the window would be a great idea. For now, though, you can always use the File > Import feature to include it on the list, along with any metadata you want.