I am under the impression that keeping isolates in separate process is most important as a proactive defense for userspace specter-like attacks. At the moment

I am under the impression that keeping isolates in separate process is most important as a proactive defense for userspace specter-like attacks. At the moment there should not be known vulnerabilities. I believe that cloudflare removed some of the more risky JavaScript API in that regard.