after reading the comments, I think the takeaways for games are

1. sandboxing - restrict read/write/execute folder/file access at kernel level

2. sandboxing - restrict games to execute arbitrary code, only the game binary itself is allow to be executed

3. anti-cheat software should not be installed at client's computer

4. implement anti cheating from server side instead of relying on client side anti-cheat software