Because there are still, over a year later, no reported cases of any spectre/meltdown vulnerabilities actively being used in the wild.