[vacuity]

My (admittedly limited) understanding is that IOMMUs still have practical roadblocks to being a solidly established part of the security of the computer. Of course they aren't bad in principle. Perhaps it's just that we aren't willing to eat the performance cost of making them more robust, but then performance is a tortured debate.

[surajrmal]

The primary roadblock is cost and complexity. The technology itself is sound and doesn't have major performance problems.