It Could be straightforward for a destructive entity to modify a Kali set up to have exploits or malware and host it unofficially. You can easily set up Kali Linux in its default configuration from this picture but you won't be able to choose from desktop environments or to specify https://www.youtube.com/watch?v=7yoEpl90KUg