I almost got pwned because I didn't realize KaliLinux installs Open VMtools (VMware)

Installing “Guest Tools”, gives a better user experience with VMware VMs. This is why since Kali Linux 2019.3, during the setup process it should detect if Kali Linux is inside a VM. If it is, then automatically install any additional tools (in VMware case, open-vm-tools and open-vm-tools-desktop). The Guest Tools are also pre-installed in the Live image since Kali Linux 2021.3.

https://www.kali.org/docs/virtualization/install-vmware-guest-tools/

So yes, I used Kali linux for static malware analysis

I disabled drag and drop in the Vmware settings initially when I first installed Kali, through a miraculous accident of accidental copy and pasting a hamrless text file onto my desktop from the VM, I scoured the internet to see in the docs that the kali team added this on purpose for VMs.

Now for a pentesting app, why would they ever think adding a vulnerability like this in the first place?