[necovek]

Interestingly, they claim to have done this and offer it as an API layer (Trusted System Agent) for other agents to use.

There is just this minor point that their own agent simply doesn't use it and goes directly to lower level interfaces nobody else gets access to: exactly the thing DMA was designed to stop.