[szszszsz]

As far as I see Qubes 4.x is protected from most of the CPU attacks [1][2] since over a year. Do you have anything particular in mind?

Disclaimer: I work with Nitrokey.

PS Due to comments' post limit my replies might be delayed.

[1] https://www.qubes-os.org/news/2018/01/11/qsb-37/

[2] https://github.com/QubesOS/qubes-issues/issues/4262