[cjsplat]

That 2016 phone couldn't be protected from Spectre family attacks without a ridiculous performance penalty.

What is the point in "security updates" for a CPU that can't be made secure?

[Etheryte]

This misses the point completely. Regular security issues happen often, in 2023 alone we've already had 809 CVEs in Android [0]. Saying we should overlook addressing those because sometimes a CPU level security issue comes along is absurd. Spectre and other similar families of attacks are comparatively rare enough that they have names not numbers, that should say enough.

[0] https://www.cvedetails.com/vulnerability-list/vendor_id-1224...