Indeed, there's a driver called DFMirage which works as a low-level display hook. It can be used in combination with the TightVNC fork to improve host performance. And of course there's always cameras. How does BLEEP intend to defeat stuff like that?