Intrustion Detectors in dom0: bad idea?

Yes. More discussion on a similar topic: QubesOS vs OpenBSD Security.