The kernal provides tools to inspect the system that userspace-only probably never can. So "works" here would be not crashing when it cannot investigate. The dev of the game Rust (which previously supported Linux) has brazenly said game devs are not serious about anti-cheat if they support Linux. Rust still has cheaters on Microslop Windows as kernal access isn't even enough. Linux is better of not chasing the delution that is modern client side anti-cheat.