Doesn’t Spectre just require speculative fetching? In which case in order is not sufficient as to guarantee immunity.

It’s Meltdown that relies on out of order execution.

https://meltdownattack.com/meltdown.pdf

https://spectreattack.com/spectre.pdf