@Suiseiseki @SuperDicq @Mamako @alina @grimmauld
Indeed. If you want to completely avoid a speculative execution attack, just use a D510MO or D410PT with GNU Boot. You could also use a D945GCLF or D945GCLF2, if it weren't for the fact that they have apparently been non-functional in Coreboot for about five years.