No QA is able to find out a Spectre vulnerability. QA is irrelevant in this conversation.