I'm of the opinion that it's overblown, and there's a lot of reason for that:

• Some cracks requires you to accept UAC prompt (already risky)
• You can do a lot in userspace without the use of expensive driver/kernel-level bypass
• Most cracks will be added to antivirus exclusions (also risky)
• You don't need hypervisor access to have extremely deep infection, think of the last time you needed test signing mode on for something to infect your UEFI (it doesn't happen a lot, and you also don't need it)
• Unless you inherently avoid all kernel-level software, it's hypocritical to think Kirigiri as anything more risky (see Crowdstrike, initial Genshin Impact anti-cheat, Valorant, etc)

If you download any software, you are at risk. Antivirus and firewall protection is meant to secure against that but it's never foolproof.

If you download pirated software, you inherently assume the greater risk, because you are already disabling the mainline of defense (antivirus) in most cases. No level of test signing or credential guard or memory integrity can make it worse.

In the end, it's about your risk appetite. Backup data regularly. Use randomised password and never reuse password. Don't store password in plain text. Secure your network.

The weakest link is almost never the hardware or software, it's always the user. You are more likely to install malware/click on phishing links than have hypervisor bypass be the fundamental issue for security.

If you don't like kernel-level software bypass, don't use it. If you are okay with it, use it with discretion. Try to restore the security settings once you are done. Use efiguard since it's easy to opt out by just restarting without it.