BlueField does not automatically isolate security from the host. NVIDIA documents NIC mode, DPU mode and a restricted mode that blocks host-side administration. The security boundary depends on the operating mode, management path and configured services.