They address this issue specifically (don't have the links now, I'm sorry) - basically one of the "must haves" for the hardware to be considered good enough (meaning pixels have it and new motos will have it) is a hardware capability of the strict separation between the os and devices, ie baseband unable to influence the os (snoop/inject stuff, etc).

Don't remember that at the moment, it should be one of the requirements they list under "future hardware" In the FAQ.