My understanding is that actual kernel-level software would have to at least have a Linux-specific driver included. Otherwise if it really is running entirely through Proton, it's somehow faking the ring 0 access. I'm not entirely sure, but I do think that anti-cheat must work differently from the big ones like FACEIT and Valorant.