There is a third way: have the CPU JIT the code to a very different architecture according to completely programmable firmware, just like Transmeta did. I don'

There is a third way: have the CPU JIT the code to a very different architecture according to completely programmable firmware, just like Transmeta did. I don't know whether the Transmeta CPUs are vulnerable to Spectre and Meltdown, but fixes to both would be one firmware update away - and most probably with little to no performance impact.