In my initial reply, I was considering the history of the machine having had malware on it, and not running an OS version that fully protects system files or modern malware threats on the macOS side.

There's also the issue of cloning in Disk Utility or other tools potentially not bringing over a recovery partition which would block certain features from being used such as Filevault.