Epic's EAC2 v2 seems fairly easily bypassable
Matthew Garrett says Epic's Linux Easy Anti-Cheat 2 attestation can be spoofed with a reset or spare TPM.
Matthew Garrett analyzes Epic's upcoming Linux Easy Anti-Cheat version 2, which uses eBPF plus secure boot, measured boot, and TPM remote attestation. He argues a quote can be spoofed by resetting an accessible motherboard TPM or by attaching a USB-to-SPI TPM programmed with expected measurements, while a modified kernel lies to eBPF. Servers could later block a specific TPM, raising the cost for cheaters, but he concludes PC remote attestation is weak when a TPM is not bound to one machine.
44