They do but almost no in order design can manage to load a value from memory and then launch another load from the location based on that value before the branc

They do but almost no in order design can manage to load a value from memory and then launch another load from the location based on that value before the branch resolves and the speculation is aborted. IIRC the Cortex A8 and Power 6 are the only two in order processors vulnerable to Specter.