I've went through Denial, Anger, Bargaining, and now in an Acceptance stage after taking up to 31% performance hit on some of services managed by my team. Worst case has been Elasticsearch so far with our load pattern, taking that 31% hit. Oh well, too bad, enjoying the ride.
Time to switch to an Epyc host?
By near zero risk they mean that no one has yet reversed engineered their branch prediction which is required to effectively exploit it.
Give it sometime and the BTI patch would have to be enforced on AMD CPUs also.