It's not certain that the software catches cheaters. It could be security theater. Even the false positives could just be to make people nervous.

Where would they get reliable training data?

There's a pile of money to be spent on this stuff, and virtually zero accountability. What's that a recipe for?