From what I have found, the main difference between an eBPF program (which is what EACv2 contains) and an actual kernel module, seems to be that other parts of the kernel will be protected from EACv2. However, an eBPF program can spy on all your user space programs, read memory belonging to other processes, etc. They’re also saying that the anti-cheat is going to include a systemd service, which I assume is going to run as root.
From what I have found, the main difference between an eBPF program (which is what EACv2 contains) and an actual kernel module, seems to be that other parts of the kernel will be protected from EACv2. However, an eBPF program can spy on all your user space programs, read memory belonging to other processes, etc. They’re also saying that the anti-cheat is going to include a systemd service, which I assume is going to run as root.