[matmo]

What's the use case for this? Is this for crypto sensitive code or password matching that is vulnerable to timing attacks and such? Or is this for avoiding things like Spectre in a more general sense?

[skybrian]

The latter. It's for guarding against malicious JavaScript discovering secrets. In practice, the browser should have this sort of protection built in.