Microsoft Azure silently install management agents with vulns on your Linux VMs
Most (if not all) major cloud providers do this if you use their provided images. If you want to avoid agents, then go with a provider that allows you to upload your own ISO which means you can install a vanilla OS.