[hannob]

> can anyone comment on whether Firefox should be considered secure until the work on process-per-site lands

No and Yes.

No, theoretically there could be spectre vulns. Practically we have seen zero spectre-based attacks in the wild. It's not a big deal.