Vanguard blocked some tools that had easily exploitable kernel modules at the start because people were using them to get cheats into kernel mode.