Until you can give me a hardware and software stack that has full correctness proofs, including absence of side-channels, I will have to assume that my best course of action is not running untrusted code if it's not absolutely necessary.