This is a known thing since quite some time and the only solution is to use separate domain. This problem has existed for so long that at this point we as users adapt to it rather than still expecting Google to fix this.

From their perspective, a few false positives over the total number of actual malicious websites blocked is fractional.