I think it's very reasonable that the best possible security is not implemented in microcode.