Is this including SPECTRE, etc. mitigations?
Spectre doesn’t make much difference since its not making syscalls.
If you can somehow keep the CPU fed it becomes obvious there is more oomph behind the Intel device. That said how often are you running hand rolled assembly routines?
As an additional datapoint liblzf is faster on the Ryzen. But its limited by pipeline stalls so doesn’t get to take advantage of the extra resources.
Given that, I'd prefer they had shell access as a low privilege user than be able to read my ssh keys from RAM...
Obviously if you compile software as your regular linux user account like most users, you're already a sitting duck, so might as well throw in a few more vulnerabilities.