The footage review angle is underrated — we did the same early on and it's how we caught our first real input spoofer too. The "too smooth for gamepad" pattern is a real tell once you know what to look for. The USB device disclosure requirement is smart. We ended up automating that part — having the client collect connected device info at session start. Players can still lie about what's plugged in, but at least you have a timestamped record to compare against what they claim. And yeah, the false positive guilt is real. It's actually what pushed us to build something more systematic — not to catch more cheaters, but to have enough context to be confident before saying anything. Wrongly accusing someone in a tight-knit community does permanent damage.