Eh, If an average security programmer redneck like myself can abuse spectre and meltdown, I am pretty sure that some of the malware/ransomware can, they are not

Eh, If an average security programmer redneck like myself can abuse spectre and meltdown, I am pretty sure that some of the malware/ransomware can, they are not state sponsored but do have a financial incentive to do so. An attack vector is available, they'll abuse it if they can. Do you think I'm overestimating them ?