I don’t understand why games don’t just boot off an image if they need kernel access. Just provide and boot up their own kernel and isolate their spyware.