Kernel level anti cheats that enable Wine/Proton support doesn’t actually run in kernel mode on Wine/Proton. Instead it allows itself to be run in user mode provided that it likes the environment enough. And maybe RDTSC latency isn’t too high.