I'd say dont disable mitigations on systems not used for only trusted code. I'd do it on e.g. HPC or dedicated metal server nodes. I'd never disable it on a des

I'd say dont disable mitigations on systems not used for only trusted code. I'd do it on e.g. HPC or dedicated metal server nodes. I'd never disable it on a desktop or mixed tenancy node.