CFW syscalls disabling i think helps, but yes that is speculative as well. but i say it can only help, I doubt it hurts.
Modded Eboots and fixed eboots is a huge trigger and i have always said that.. What you hear about bans is usually more false info then true info
1.) They cheated online and did not want to say they did.
2.) They used cracks
3.) They have modded eboots for whatever reason.
4.) Someone else used the console without them knowing.
5.) buying a CID expecting it not to get banned. (Ugghh people are shady when they sell these things people, very very very very few do them honestly)
6.) They do dumb things when connected. (i.e launch homebrew)
7.) ConsoleID was stolen (by various means)
8.) lack of common sense
There is so many variables and not enough honesty and that is the problem when trying to figure out any consistency in the bans.. Because there is always that curveball. SO MUCH FALSE INFORMATION.. The spoofing of apps. That is 100% pointless in my book. if the eboot does not match the title ID (IMO then that is a problem and a flag is raised). Then spoofing the TitleID because people thing sony is scanning the official games folder (dev_hdd0/games/) that is not happening IMO as if it was i would of been banned long time ago. You know how much i was testing and doing things with RetroXMB before it's release. I had 350-400 custom directories. If that is not going to get flagged i think it safe to say (at least IMO) that is not a worry.
I just have been able to debunk alot of theories and claims that have been made. I think rule number #1 & #2 is respect the network and keep it official as far as your games go..
Edit:
Yea the first person shooters on their own servers seems to look at more things, then Sony themselves. Which is somewhat odd. but fro the game developer i can see why as they want to make sure their online community is fair..