Remember to update your bios. If a security exploit is fixed in the bios then the slower MS mitigation fixes don’t run.