It was pretty obvious from the get go that my main concern is intrusive anti-cheat solutions.

Either way, the bulk of anti-cheat should be server yes, a basic client-side AC can exist alongside it to capture the most basic of cheats. Although entirely server side would be fine.