> The advantage of pmem is that short-lived VMs can directly access data from the host instead of copying in.

Is it just me or does this sound really, really exploitable from the VM-to-host direction? I'm hoping there's some way to safeguard such a process.