You're thinking of single address space OSes. I do not believe such OSes can ever be secure given how often vulnerabilities are found in web browsers's JS engi

You're thinking of single address space OSes. I do not believe such OSes can ever be secure given how often vulnerabilities are found in web browsers's JS engines alone. Besides, AFAIK the only effective mitigation against all Spectre variants is using separate address spaces.