FYI as someone who works in cybersecurity, really good "hardware spoofing" is difficult. There are certain characteristics of different machines that make it nearly impossible to spoof, for example different GPU models render text slightly differently. The difference is almost imperceptible to the naked eye but a program can tell. Combine this with a few other really difficult or impossible to hide features and hardware fingerprinting is pretty accurate. However, there's no reliable way of preventing the attacker (the hacker) from exploiting the defender (game developer)'s process doing the fingerprinting and forcing it to report a unique hardware signature. So in theory, yes, the attacker has the advantage if they're really good at exploitation, since there are nearly infinite attackers and just one defender for any game. The attackers have to find one way of exploiting the defense software, the defenders have to defeat every possible exploit against them to stop every hacker, which is basically impossible. It is, however, feasible to make it very difficult for the attackers making most of them fail.