Most anticheats are rootkits (see: kernel mode drivers). VAC’s tricks are behavioral detection of cheats and that’s the best approach imo. Trust factor is the real genius. Just put all of the toxic players and potential cheaters together.