Apparently Bedrock clients can completely bypass the anti-cheat.
Your only option right now is to check the players before the game starts and leave if any of the player's names start with a dot.
If you have recording software you can report the player as above.
It isn't an instant ban though so you have to queue jump a lot.