I used to develop cheats for CSGO (I work in anti-cheat now). The ROP chain cheat is 100% detectable right now with VAC without rootkits or the like. No cheat is “VAC-proof”. I have seen Valve’s creativity at responding to evolving threats. It’s just a matter of time.