I'd be curious to see a list of devices which ship with this enabled. I imagine it's shorter than the article makes it sound.

I imagine DMA was a trade-off for speed. Security is about such trade-offs.