Why does a boarding pass need a rootkit? ("anticheat" is usually code for root kits, and at least it has some positive trade off for users in the video game case)

They can just check the scanned pass against their own database to verify authenticity. They could also cryptographically sign it.