Has anybody read anything explaining how giving external devices DMA access is or isn't a problem? It seems one could make a Thunderbolt device that silently injects itself into the running system, writes itself to the hard drive, etc. without even touching the CPU.