I don't think people are understanding this. The cheat still reads memory, think of the DMA and other hardware as the bypass to read the memory without setting off any flags, meaning that the client is still retrieving the positions from memory but reading it through the hardware instead of perhaps a driver.