Why is the issue speculative optimization, not unsafe code? We know what unsafe code is, remote code, code loaded from unknown sources, etc., so those can be segregated at a cost, while safe code runs with efficiency. If it's about unsafe code slipping through due to misclassification, well, there are more vulnerabilities than the processor.