Check out what I said about mapping the GPU... Any app could use the GPU to DMA anywhere on the machine. Saving those context switches counts for a LOT, but means that you don't really need to worry about security since your machine is wide open anyway.