The primary danger is that you do not control the destination of the Bitly link, nor do you know who owns the rogue KMS server. Because the shortened link can be redirected at any time by the creator, clicking it or downloading the file might deliver:

For businesses, non-profit organizations, and academic institutions, deploying software via unauthorized scripts violates intellectual property laws, resulting in severe financial penalties during software audits. Deploy Safe, Legal, and Cost-Effective Alternatives