I'm speculating a bit here, but I think it could guard against side-channel attacks against the kernel. e.g. if you had a sidechannel that leaks data from the

I'm speculating a bit here, but I think it could guard against side-channel attacks against the kernel. e.g. if you had a sidechannel that leaks data from the kernel, the kernel can't disclose data that it can't actually read.