Isn't kernel level anticheat also looking for things like programs that do screen capture and programmatic input? Your assertion that server side anticheat must be implemented for every game is correct but I suspect you're oversimplifying what client side anti cheats do.