One possibility is that AMD sales were really low until they came out with Threadripper. Security researchers just didn't put the time into a CPU that's not very common.

There are similar AMD vulnerabilities coming out now:

https://www.digitaltrends.com/computing/amd-take-a-way-secur...