TLDR for those who didn’t read the EAC Linux v2 post.
On hardware side, it requires TPM 2.0, Secure Boot and Input-Output Memory Management Unit (IOMMU) enabled in BIOS.
On software side, it requires a signed kernel and kernel modules, measured boot, kernel lockdown integrity mode, kexec to be disabled, and Linux Security Module BPF.
Where keys are needed, they must all be well-known. Epic maintains a list of well-known keys.
Basically this all requires that your machine has the required features and that your distribution provides a proper kernel.
Does EAC Linux v2 use a kernel driver?
No. EAC Linux v2 does not install or load an anti-cheat kernel module. It uses security features already provided by the Linux kernel, together with an anti-cheat systemd service and eBPF programs.
Does EAC Linux v2 run in the background all the time?
No. It includes a systemd service, but the service only starts when a protected game starts and it stops when the game exits.
They wouldn’t need to break anything. They could instead make the 32bit libraries optional, and show a warning if the user tries to play 32bit Linux game. The user would then have two options: Either play the Windows version through Proton, or install the missing libraries to play the Linux version.