Friday it is - I can confirm iommu=pt works. And igvt (intel graphics virtualisation) still works, so no problem on that end except that I had to add the extra flag.
I still think that means something somewhere isn’t correct but I honestly don’t care enough, thanks for the hint. You might want to add a README to your coreboot-files repo and write that eventually?