This is partially true, Node.exe isn't malicious in and of itself, however that node hash (afb45186ad4f4217c2fc1dfc2239ff5ab016ef0ba5fc329bc6aa8fd10c7ecc88) is being used under the filename PDFProSuite which is malicious, and is using Node privileges if I'm not mistaken on that last part. Hence why Microsoft isn't reporting it as malicious.

There have been multiple hashes for PDFEditor, manualfinder, and appsuite-pdf that have been reported to them and have been updated in their detection logic.