As I've already said, and it seems to be backed up by research done by Allyn Malventano on PCPer, benchmarks are not telling the whole story and are hitting the very thing that these mitigations have restricted. Some benchmarks, depending on how or what they're testing, are literally showing worst case scenarios as much of what they do involves thousands of small random accesses, something that most normal workloads don't do.