Unless I’m reading it wrong? Seems like it’s more of a “we can get your hardware to behave a certain way, even when sandboxed” thing than a “this is a very serious security vulnerability” thing?

I don’t see how it could become more efficient since the attack vector is basically just filling your ram and forcing your OS to clear the page cache.