Yes, sys-audio (when properly configured) isolates the audio into its own qube. This means that you can use any audio device without fear of compromising dom0, and you can optionally make it disposable to make sure that a malicious device cannot persist. A good guide is here: