Would installing an OS on an external ssd and booting into that to run pirated software while blocking access to other drives in your system or physically unplugging them be one way?
Or are there better ways to isolate the software you run and use as much as possible?
That’s true, but the IOMMU on your host is supposed to prevent any accesses outside of the group you passed in
As long as the GPU is the only thing in that IOMMU group, you’re reasonably safe