I don't know if the anti-cheat does this, but the architecture I imagine is that the game comes with its own kernel driver which detects/prevents tampering with

I don't know if the anti-cheat does this, but the architecture I imagine is that the game comes with its own kernel driver which detects/prevents tampering with the game in userland, and the secure boot process attests to the presence of kernel driver on the running system.