One thing to note is that Microsoft is planning some kind of kernel anti tampering system in future that hopefully will give us user level anti cheats that actually work. Though some will very likely see this as some kind of "we don't control our computers anymore" move.

https://www.leagueoflegends.com/en-us/news/dev/dev-vanguard-...

> “On Demand” Vanguard

> "As was foretold, a future will eventually arrive where we can rely on the security features of Windows to protect its own kernel, instead of protecting it from boot with a driver. This will allow us the opportunity to start our anti-cheat services when the game client runs, provided the end-user has opted into all of these features. We’ll have more communication on this topic early next year, but if you’re on Windows 11 and on relatively recent hardware, we wanted to let you know that you won’t have to tolerate the taskbar icon forever (even though we worked very hard on Vanguard’s logo)."

https://blogs.windows.com/windowsexperience/2024/11/19/windo...

> "To help our customers and partners increase resilience, we are developing new Windows capabilities that will allow security product developers to build their products outside of kernel mode. This means security products, like anti-virus solutions, can run in user mode just as apps do. This change will help security developers provide a high level of security, easier recovery, and there will be less impact to Windows in the event of a crash or mistake. A private preview will be made available for our security product ecosystem in July 2025."