Assuming you're referring to the DMA vulnerability, that isn't present when doing IP over TB, because it doesn't use the PCIe layer.

https://en.m.wikipedia.org/wiki/Thunderbolt_(interface)