Correct. And, in general, I don't think this worsens it to the level of a CPU without PAC. It still takes effort to do this, since like SPECTRE, you need the ab

Correct. And, in general, I don't think this worsens it to the level of a CPU without PAC. It still takes effort to do this, since like SPECTRE, you need the ability to measure time, and you need to spend a significant amount of CPU power to get a useful signal. Definitely an impressive result, and it certainly reduces the usefulness of PAC, but I'd guess PAC is still going to prevent a significant number of attacks.