I don't see how server-side-only anticheat could prevent cheats that simulate perfect input i.e., aimbots on known targets. Yes, you could attempt to heuristically identify cheat-y looking patterns of input, but I suspect that's much much easier said than done for anything other than very simple aimbots.