I'm not 100% read up on this but I'm cautiously optimistic that this doesn't seem all that bad. It's not kernel-level but appears good enough that it will have similar performance in detecting cheats.

Also seems like it should be fairly widely compatible. The bazzite team have already said they believe they should be compliant or have a clear path to being compliant.