This major shift is well received by the tech community and appears to be an industry wide movement [1]. Looks like meltdown [2] and spectre [3] have run their course.
(Disclosure: I work at Cloudflare but wasn't involved in this decision) Spectre variant 1 still affects patched chips with any sort of speculation and the price of fixing via compiler is substantial. It's a multi vendor structural issue. The hardware industry is stuck with some very unpalatable decisions to fix this. In some cases there are tricks to protect particular arrays but it's very finicky especially if arrays aren't a power of two in length.
Bravo to Cloudflare!
[1] https://www.amd.com/system/files/documents/linode-case-study...
[2] https://en.m.wikipedia.org/wiki/Meltdown_(security_vulnerabi...
[3] https://en.m.wikipedia.org/wiki/Spectre_(security_vulnerabil...