Back when I had some old rack mount servers (Ivy Bridge Xeons) I would disable the mitigations where possible/not update microcode/BIOS. The attack vectors bein

Back when I had some old rack mount servers (Ivy Bridge Xeons) I would disable the mitigations where possible/not update microcode/BIOS. The attack vectors being somewhat niche and me being the only user means the trade off for performance wasn’t worth it. I think it’s a fallacy to assume known vulnerabilities MUST be patched… but alas if that’s not an option for whatever reason, I hope the plan is to move to AMD eventually. They have occasional vulnerabilities too, but so far nothing as detrimental to performance as Spectre or I assume Downfall.