OCL build on runtime like good idea for new chipsets so the miner can support all OCL based devices.
Well... the issue being, anyone with half a clue can get your kernel... putting it in the binary as AMD IL, for example, would allow support for pretty much everything that uses the Catalyst compiler, I believe. The only outlier would be Vega, which requires the ROCm stack - which in turn uses the LLVM/Clang toolchain. For that exception, you could simply include a Vega kernel as ISA in the miner.
You also didn't really protect the miner at all - not only was it not packed, or any anti-debugging traps laid, but you didn't even check for the common environment vars used for debugging or kernel dumping...
When he will - he will certainly did ))
But now all protection methods will result in anti-virus software misdetection ...