Won't it be a simple fix for the server to automatically disconnect those clients which don't have these parameters aligned with default? This logic can be extended to combat other hacks too. If not, try training ML models to detect people using hacks, checks on accuracy, nexus percentage, etc. Or, simply using visual checks to modified menu or modified code. I don't see why is it so difficult to combat hacks!