I can have secure boot of virtualized hosts, and still modify system memory from either a kernel exploit or virtualised systems host. Cheaters absolutely would install crappy signed kernel modules to achieve this.