> there's really no recourse for it in the spec There's not only a recourse for it, modern firmware implements it. You just use the IOMMU to restrict Thunderbo

> there's really no recourse for it in the spec There's not only a recourse for it, modern firmware implements it. You just use the IOMMU to restrict Thunderbolt devices to being able to access their own buffers.