Oportunity for anti-malware?
Meltdown and Spectre flaws seems to be the result from speed vs security compromises and business ambitions to overcome benchmarks.
What this paper may show (i'm speculating...) is that perhaps there is no complete solution for speculative processing at CPU microcode. To be fast, CPUs guess what should be happening next. In this compromise for speed, building full security on it, may be always prone to flaws (...continuing the speculation...). Like a theorem... (bold speculation...)
Then wouldn't it be the place for anti-malware paradise at the OS level? Let's run the CPUs faster and let the anti-malware tools detect programs that tweak around side-channel attacks?
Wouldn't the result be better for performance? What about a anti-malware function that disables CPU patches and do the job for you? Sure to be, covering web browsing. JS, whatever...and all OSes...
Biting the hand that feeds IT
