With Arm big.little architectures, it could start making sense to have dedicated in-order cores for running JavaScript and other “untrusted” code.

Also, I wonder if disabling mitigations on the desktop and running the browser in a VM with mitigations enabled would be effective.