Comment by stragies

The default Garuda GRUB options disable all CPU/GPU level security patches against Meltdown, Spectre etc. by running with "mitigations=off". That is playing with fire for anything operating on data you'd consider non-public, imo.