Rhaadt and Stallman have something in common in that they have been vindicated in near biblical proportions, often far long after presenting their stance and having been casually derided for it.

There is today still no real mitigation for the side channel flaws collectively named Spectre flaws. A look at Jonathan Perry's work, adjacent to the side channel stuff, tells us that most modern CPUs still not end of life today are truly single-tenant.

When reading AWS' writing on side channel flaws, someone who skims that writing will leave with a different conclusion than someone who reads what AWS has shared in its entirety and reads it slowly.

The only truly effective way to isolate applications effectively, in a way accessible to people in average financial stature, is to put them on different CPUs (hello dual and quad socket server boards). Thanks to the prevalence of inexpensive ARM and Risc-V based single board computers, although this requires advanced skills with operating systems and relevant tooling this is practicable (as ugly as it is).

There are some new general purpose processors made from ISA that don't use any form of speculative execution. These may be undoing decades of bad-assumptions cruft. Those who deserve these processors won't wait for retail channels to deliver them.