Hacker News Reader

How is it that running in a browser is inherently unprotected?

Sure, they don't usually have the thousands of man-hours dedicated to cheat detection, but the basics are usually sorted out.

Client-side anticheats are essentially advanced rootkits, and cannot be implemented in a browser sandbox.

Because it runs in the browser it's trivial to apply client side cheats. For example see through walls, auto aim.