[rightbyte]

Ye, but I didn't understand how this was different than Spectre, except with different caches.

Still it's fine with no JS and no shared processor time, right?

[rurban]

Right. If you run no foreign code you are safe.