From what I have found, the main difference between an eBPF program (which is what EACv2 contains) and an actual kernel module, seems to be that other parts of the kernel will be protected from EACv2. However, an eBPF program can spy on all your user space programs, read memory belonging to other processes, etc. They’re also saying that the anti-cheat is going to include a systemd service, which I assume is going to run as root.

EAC v2 is technically not in the kernel, it uses existing Linux security features to get the same level of control over your computer AFAIK. Which is probably what Microsoft is aiming for too