GPUs can do that. For example, Intel GPUs since Ivy Bridge have had a PPGTT (Per Process Graphics Translation Tables) to protect the memory of each process from

GPUs can do that. For example, Intel GPUs since Ivy Bridge have had a PPGTT (Per Process Graphics Translation Tables) to protect the memory of each process from other processes. It can also be used at a finer-grained level if there are multiple VkDevices in the same process. You need that sort of MMU to have any sort of secure process isolation without doing expensive command buffer validation on the CPU.