I'm going for firmware and processor errata if they let me in on this. Their failure will be so expensive that I'll finally have the numbers to justify either semi-custom work from Intel/AMD for legacy or a multi-core, secure RISC-V. :)