Exploiters can easily spoof that. They have the ability to modify anything on their client. They can simply just remove the “clientside anti-cheat” while keeping the heartbeat alive and telling the server that they are a legit client.
The only reliable anticheat is by verifying everything on the server.