There are some plausible ways it could still be exploited, but, I would say those deserve higher in the stack mitigations. As a contrived example, a game serve

There are some plausible ways it could still be exploited, but, I would say those deserve higher in the stack mitigations. As a contrived example, a game server that accepts maps over the network that can contain a scripting language like Lua/javascript could theoretically cause data leaks. By higher in the stack mitigations, I mean things like neutering the javascript timer accuracy in chrome fix to Meltdown/Spectre.