The real solution is to stop executing untrusted code that was just downloaded from some random place on the internet. You can't both simultaneously optimize a runtime and secure it for untrusted execution. You have to execute it in a de-optimized manner to avoid any sidechannel leakage. We'll keep discovering these 'bugs' until we do what we did to Java Applets.