

In an article posted on the Kali blog, it's explained that over the years, more and more users have started to use Kali as their daily driver. The ARM images continue to use root by default for the 2020.1 release though. Starting with Kali Linux 2020.1 though, the ethical hacking Linux distribution has replaced the default root user (which had toor as its default password) with a standard, unprivileged user (the new default Kali Linux username is kali with the default password kali).

This is why until now the default Kali user was root, with no regular user being created during the installation process. Kali Linux contains many tools that can only run with root privileges, and its nature makes its use in a multi-user environment highly unlikely.
