> CPU vulnerabilities

These are another source of obselence. Intel generally sets an "End of Servicing Updates" date at seven years post-launch.