Saying it “doesn’t make a single difference at all” is objectively false.
Private distribution absolutely can affect detectability indirectly because anti-cheats need exposure, telemetry, samples, reports, or analysis opportunities to classify and fingerprint something good enough to be sure it is a cheat.
A driver used by 10 trusted people:
generates less telemetry,
creates fewer ban correlations,
leaks less often,
is less likely to get dumped/shared,
gives anti-cheats fewer machines to analyse,
slows signature generation and heuristic training.
That does NOT mean private = undetectable.
But pretending distribution size has zero impact on real-world detection timelines ignores how anti-cheat intelligence gathering actually works.
Security through obscurity alone is weak, yes. But reduced exposure is still an operational advantage. Those are two different concepts. 😄