> any connected device can read and write directly from your RAM

Which means that unrestricted Thunderbolt can be used to access DRM-protected data...