Well they seem to add vnc and netcat shell listeners to the startup scripts so it is kind of backdoored on purpose already outside of what's in the iso
During the installation I add Netcat to have a bind shell, this way you can get a CMD shell from Linux using the "vmshell" command included in the image.
So yes, technically it's backdoored but only for yourself :)
So yes, technically it's backdoored but only for yourself :)