Besides IOMMU bugs, which silicon vendors often subtly add to their errata too much for my comfort; an IOMMU adds security against DMA attacks in theory. I specifically say in theory because oftentimes vendors either don't configure it correctly or leave it totally unconfigured. Additionally, things like multiplexing on the same bus further complicates things