> I wonder if some form of containerization/virtual machine could make it possible to both allow for this kind of kernel-level anti-cheat without exposing my wh

> I wonder if some form of containerization/virtual machine could make it possible to both allow for this kind of kernel-level anti-cheat without exposing my whole system to untrusted code. No. Because then you could write an aim-bot that runs in the host machine…