Why do cheats still get detected in
a week?
Three reasons. First, the vendor is shipping the same bytes to every operator. One catch, whole community goes with it. Second, the vendor is at ring 3 in userspace. Any kernel side anti-cheat wins that fight. Third, aim humanization is bad, so the match server flags patterns before the binary is ever scanned.
Our answer to all three is a build that recompiles per operator, runs at ring 0, and ships an aim engine that shapes traces to read as human.