“speculative vulnerabilities on today’s hardware defeat all language-enforced confidentiality with no known comprehensive software mitigations,”