I work with Nigel who wrote this - and love his dissection of the problem and framing of disaggration as the solution. Really would these two CVEs still have mattered if device emulation lived in its own trust domain instead of next to the hypervisor?