They aren't? I know a significant number of people who have disabled spectre and meltdown protections in favor of higher performance because they are not conce

They aren't? I know a significant number of people who have disabled spectre and meltdown protections in favor of higher performance because they are not concerned at all about side channel attacks. Single tenant workloads that run no untrusted code that are not public facing are not exactly a unicorn.