Okay, maybe I'm missing something crucial here, but "devices have direct access to the PCI bus" sounds kind of terrible. Forget keyloggers: I can log your proc talking to the drives and monitor now. Am I wrong?
Is there a reason that Apple needs to keep creating its own proprietary connections/protocols?