> But I could be blowing smoke and know nothing about the layers of kernel integration these malware have developed.
Kernel level? The SOTA cheats use custom hardware that uses DMA to spy on the game state. There are now also purely external cheating devices that use video capture and mouse emulation to fully simulate a human.
You'll never stop the arms race, but requiring specialized hardware to cheat is as close as you'll get to a decisive victory against cheats.
The vast majority of cheaters in most games are not sophisticated users. Ease of access and use is the biggest issue.
> The SOTA cheats use custom hardware that uses DMA to spy on the game state.
And the SOTA anti-cheats now use IOMMU shenanigans to keep DMA devices from seeing the game state. The arms race continues.