What they added is a magic switch that disables indirect prediction across context switch and kernel half of memory space from non privileged cobtext.

It is done somewhat as a hack. Overhead on system calls should be relatively low still.

Love to see actual benchmark results from this with various applications - databases, network stack, apache, ngnix, etc.