We've found that the best security protection against vulnerabilities, that is to avoid intel - for now. Ok, they struggle - at least they say they do - to secure their new models, but leaving older models completely without mitigations! Quite often is a new UEFI/BIOS needed, but motherboard...