Is Cloud DMA required?

Yes. Cloud DMA is required for full ESP and aimbot. HVCI, Core Isolation, TPM, and Secure Boot stay on.