Spectre vulnerabilities remain a problem in browsers, and the PoC even works on new Apple silicon! https://security.googleblog.com/2021/03/a-spectre-proof-of-concept-for-spectre.html