If you're someone who is worried about people looking at your PCs contents and stealing them or whatever: you do not need kernel access to do this, Windows has multiple calls that allows your memory and hard drive to be read in user space and any game - anti cheat or not - can do this easily if they wanted to. I'm just going to copy a post I made earlier: It's also important to note that people are getting really worried over the Ring-0 aspect of this and seem to be ignoring that people can fuck over your PC in Ring-3 anyways. (even if you don't want to go that far you could still just isolate & replace the driver the next time the game is genuinely launched tbh)

It just adds an extra step, all someone has to do (mind, extremely difficult just like doing anything with Vanguard) to be malicious with either of those is to find out how the service communicates to start the WriteDisk process of the kernel driver, start it even when a game isn't being run, isolate the driver before it is loaded and then deleted, edit/replace it, use the service to load the edited/replaced driver, and boom you have successfully loaded a malware driver from the service regardless of a game being played. More importantly, EAC & BE having their kernel drivers started by a service does not preclude them from the same hypothetical difficult attacks other people are worrying about with Vanguard. People will find out if it's doing anything actually sus anyways And that the concern people are raising is about what it could do when it's running when you're not playing the game.

Faceit anti cheat kernel