When there is a minor CS:GO update, the cheat automatically updates. If there's a major update, you'll have to wait for UnstucK or another developer to fix it. Security is obviously undisclosed and not up for discussion.
You don't have to much except close RoyalHack(quit CS:GO) when wanting to switch to ESEA. ESEA doesn't care if you cheat, only if you cheat on their servers. I'd imagine it is the same for FaceIT but I don't know much about them.
However, our cheat is Internal; we have a product that is only aimbot/tbot for 6 euros/month plus tax.