Well my RPM/WPM (Read Process Memory/Write Process Memory) Radar does both - it reads locations and information like players, tents, vehicles, etc but can also do a limited amount of WPM activities like no rain, day time, night vision/thermal, no grass.
I lost a key writing it one time until I learned how to more safely test programs. Then I went through a lot of processes to make it hidden from BE. I am currently working on a weapon spawner - people said it is possible to spawn yourself a load out or copy other people's gear. Not having much luck with that.
So to answer your questions
1) it's always there, but if coded properly you should be able to avoid detection.
2) Maybe write your own bypass so you can use your own scripts? Depends what you want to do.