This might be a bit...too far out there, but could there be side channel attacks via cpu heating? Like heating the cpu to near borderline with AVX512 and seeing if a hyperthread causes throttling due to some “heavy” aes instruction. Sounds unlikely to be exploitable though.
Ever since specter I’m thinking of any performance changes by previous instructions might be exploitable. Again thermal throttling might be a bit too far out there since it’s not _that_ deterministic. Fun thought though!