Is VAC running?

If I am correct. VAC is enabled.
But, VAC does not detect LUA cheats. Which is the majority of cheats.
So if you play on server which allow client side LUA. You can cheat without fearing VAC.
But, if you use a bypasser. There is a very low risk of getting caught.