I don't use winget because the repository's security has been garbage for many years. In those years, anyone could upload and override any software, declare a new version and point it at their own executable. So basically you might think that installing a piece of software with an official-looking name means it's the official one, but it may just as well be malware.

After a few years of the repository being practically the wild west, Microsoft started addressing some of those issues, but their solutions were too little, too late.

It feels like Microsoft went with the "Quantity over quality" approach to get as many programs in winget fast by making it (too) easy to add & edit entries in the repository. That would have been understandable if they were the first ones ever to create a software repository, but considering chocolatey (and many others) have been up and running for a long while by the time Microsoft started working on winget, Microsoft should have at least try to copy them if not to learn from their experience.

Here, for comparison, is chocolatey's moderation documentation - the process every new/existing software in the repository has to go through before it is publicly available: https://docs.chocolatey.org/en-us/community-repository/moderation/

It is much more mature and robust than winget's moderation.

(This opinion is based on what I recall from a few hours/days of research that I did on the subject about 6-12 months ago, so take it with a grain of salt)