Or you could just introduce an intrusive AntiCheat across all the dedicated servers, have a serverside AC working with a clientside AC for instance.

For example: The deobfuscated leak of !cac for the Source engine (specifically gmod)

-Has Registry Access

-Basically a RAT

-They can have fun bypassing that

Cheat developers would just give up as it would be too hard to bypass and would waste so much of their time. Their ROI would be so low and they would focus elsewhere where its easy. eg. Another game that has non intrusive AC's

You dont need any of this photo ID nonsense. Thats only a recommendation because you know EAC is doing absolutely nothing to combat private cheat devs.