What are the security implications here?

i.e. the Chrome team, post-Spectre, are assuming that any value in a process' memory is readable by any code executing within that process.