> they have full DMA and there's nothing you can do about it.

At least the Neo900 developers tried to isolate the baseband processor as far as possible:

> http://neo900.org/faq#privacy