TL from the project here: yeah, I should have done more work on the wording -- we locked the content too fast, and I pushed a tad too hard at getting the post out. :P
Side-channel attacks are out of scope for the security model of both seL4 and our KataOS project, so bear that in mind for sure.