For most of us driver memory bugs are extremely rare and therefore a 2-14% performance drop is bonkers.
Properly engineered security fixes don't cause performance regressions, either because you find improvements to pay for them, or you get the hardware updated to make them cheaper. (That'd be PCID in this case.)