Ok, lemme ask: what is your threat model? Is it a script kiddie, or someone who writes ROP chains for a hobby? Because I'd argue cheat authors are the latter. And antivirus melts down against someone like that hacking their own machine, so how would anti-cheat do any better? https://twitter.com/the_secret_club/status/1251570150228230145 …
While the cheater is in kernel that is. If both parties were good boys and stayed in usermode. Sure it would be less privacy invasive for everyone, but the reality is what it is.