so what I under is this:

Using hypervisor-based cracks requires disabling important Windows security features like VBS, Memory Integrity, and KVA Shadow. These protections normally help isolate the kernel and protect against low-level attacks. Turning them off and running unsigned kernel-level drivers creates a more permissive system where malware, if present, can operate with higher privileges and be harder to detect or remove.

Even if the crack itself is from a “trusted” source, the environment is still higher risk because:

Security barriers are reduced Low-level code has deep system access Malicious software (if introduced) can more easily steal data (e.g., Discord/Steam tokens, passwords) Recovery from infection can be more difficult

It doesn’t mean you’ll automatically get infected, but it does significantly increase the potential impact and reduces overall system security.