It was the BuddyStore. You can't have a live connection streaming into a game without it being detected. Not ever. Just my two cents and pretty sure this will wind up deleted or in the archive section, but oh well.
That could have been one of the flags, there are much more prominent ones that HB will never get sorted out until they optimize their code. not to mention a shitty CR will get you flagged real quick if it's calling up a spell to the wow client that doesn't even belong to the class you're on (cause there's no button you could press for that). These bans all came down to greed.
random thread where you guess about what could happen and make blanket accusations with no proof? cmon, why would they delete your post? just waiting for the 'IT WAS THE OVERLAY GOT US BANNZORD!!111'
It streamed to HB, not wow.exe. This wouldn't have affect anything anything as there's always been an open stream to HB dealing with authorization.