As pointed out by @don_crissti the feature to configure thunderbolt security levels through the gnome-control-center will only be available in verion 3.30 (with the exception of fedora who backported this feature for fedora 28).
The underlying system deamon boltd and the command line tool are however already available on the gitlab side of freedesktop.org.
Update : Bolt is now in the Arch Linux community repository.
(I can confirm that boltctl works with the lenovo T580 and the thunderbolt3 docking station.)