Its a bit better these days now it doesn't run everything as root. But yeah still not a great choice. You can just run Kali in docker / podman for the relos and tool access. Are you aware of the universal blue project? Any thoughts?