Issue still occurs in 1.18.2
I 'manually' unblocked it like below. This is in IMHO not a proper way. A professional SW development organization like Mojang should sign their deliverables to avoid this kind of pop-ups. Especially since they're part of Microsoft, the just should have these Extended Validation certificates for signing.
Works fine. Problem solved.