But qubes did issue a security advisory , talking about a security bug in VT-d/VT-x hardware that only intel can fix. For someone like schneier who want to avoid the NSA , maybe qubes is not enough.