[capableweb]

I think it's a choice with lots of positives and negatives tradeoffs on both sides (in-kernel anti-cheat vs userland anti-cheat), where any choice is not gonna make everyone happy.

How much data a in-kernel or user-land anti-cheat can easily be detected by observing the traffic that flows out from your network, so it really doesn't matter if it's open source or not.

The biggest roadblock to a open source in-kernel anti-cheat is not "exposing the amount of data they extract from you", but rather it exposes how the anti-cheat is working, which is working against the efficiency of the anti-cheat. If you know how they detect you're cheating, it's much easier to overcome that hurdle.

In most cases, security-by-obscurity is obviously flawed, but when it comes to cheat/fraud detection, exposing how it happens makes it's core value less efficient.