This.

Spectre and meltdown, while academically intriguing, don't really matter in practice for consumer devices.

Every kernel I have booted has had mitigations=off.