> I wonder if some form of containerization/virtual machine could make it possible to both allow for this kind of kernel-level anti-cheat without exposing my whole system to untrusted code.
No. Because then you could write an aim-bot that runs in the host machine…
You see no cheap aimbots and conclude the anti-cheat is not relevant anymore. May be the right conclusion is that they're working.
Not saying this justifies the kernel drivers. I don't trust my gaming computer precisely for this reason. I wonder if some form of containerization/virtual machine could make it possible to both allow for this kind of kernel-level anti-cheat without exposing my whole system to untrusted code.