Does it even need to be slower? Almost every single website out there is not a javascript app and so side channel attacks can be mitigated by simply having an r

Does it even need to be slower? Almost every single website out there is not a javascript app and so side channel attacks can be mitigated by simply having an rlimit-style CPU time limit after say a user action on a tab.