Or use the off-brand x86 (AMD) which has had very few of these vulnerabilities be useful on it.