I think even Microsoft is getting ready to be done with kernel level anticheat. After crowdstrike they've been planning to kick everyone out of Ring0, making new user mode APIs. They're focused on EDRs right now but have publicly said eventually everyone is going to be kicked out of the kernel.