A user level anti-tampering software (and more with such linux feature) is not a kernel module which is weaponized by hackers.