There is nuance here. Not every crack is malicious but you have to assume they all are because some of them are. Trusting a source is irrelevant. Many security products will falsely tag cracked software as dangerous just because it’s cracked, not because it found a specific bit of nasty code, and this feeds the idea that you can’t believe when people tell you cracked software is unsafe. But there are many truly bad cracks out there. When in doubt, don’t trust it.

And you should always doubt free shit.