Isn't it pretty much an open secret that JVM-based cheats can trivially bypass VAC?