And this flaw was found by researcher working for a cloud vendor. I wouldn't be surprised if they already have some special long-term agreements.

Big clouds have the exact same incentive issue - if a customer is really paranoid, the customer can pay the cloud extra and ensure their own exclusive infra. For regular users, the clouds can mitigate a bit at scale (but not care much about this in practice, it's not as important as cheaper faster processors).