Is the untrusted code observer able to see cache timing implications of fetches to addresses that the MMU considers off limits for the process? This is what kee

Is the untrusted code observer able to see cache timing implications of fetches to addresses that the MMU considers off limits for the process? This is what keeps surprising more, it does not align well with what I think I know about processors (not much)