xmrig from this source looks very suspect.
hXXXs://github.com/xmrig/xmrig/releases/
xmrig-6.16.2-gcc-win64.zip
It use several anti-debugging techniques and it opens up a remote desktop to receive a console connection and creates foregin user credentials.
It looks like it open new processes through DCOM with RPC to bypass security policies.
There is weird activity in the registery as well.
I cannot promise it's malware but it sure looks like it.
I would not dare to run this on a secure system.
That's the API, a feature of every miner, read the docs.
It's also the correct link for xmrig and xmrig has been around for a long time, has a good reputation and is open source.
There are a lot of issues with miners and malware, including a high rate of false positive AV detections
and also a high rate of real malware. It's good to be cautious and suspicious, but this one is ok.
Your advice not to run the miner, or any miner, on a secure system is good advice regardless.
