[mjg59]

I've found no evidence that it checks the set of trusted certs, only that secure boot is enabled (which is trivial to fake).

[tom1337]

well then thats on me and i misunderstood. I thought that with secure boot enabled a tampered operating would not boot and therefore the anti cheat can expect that if secure boot is enabled the os is legit. but yea if secure boot enrollment can be faked then my point doesn't stand anymore.