Or the mistake is that we're running different trust domains on the same CPU core.

All the various mitigations have already been very costly (something like a performance loss of 10% on current-gen CPUs?). Getting rid of speculative execution entirely would cost far, far more.