Direct access to the GPU...is that done in some kind of sandbox at least? How do Mantle/Metal/DX12 do it?
It's not really a massive issue when you're locally installing programs since you've already compromised your system in the first place. But when leveraged over the web with APIs such as WebGL, it does become a security vulnerability.