My understanding (which could be incorrect) is that the single return location clobbers the branch predictor's leaked data with static and (attack) worthless data without completely clearing the rest of the prediction cache.

Right, which means the CPU can't effectively predict indirect branches (like calls through function pointers, or certain types of switch statements).