Any branch on attacker-controlled data can be speculatively bypassed. You would have to at the very least recompile all applications to attempt to mitigate the two Spectre variants discussed so far.
Unless there is some way to turn off speculation entirely, but that would hurt performance badly.