Hardware best for post Meltdown
I see two boxes that all of a sudden I am interested in.
These are both Arm and it seems they have no Predictive Logic in the CPU and should be OK
Is that a fair reading?
Looking at Intels Micro Code Updates(MCU) they are not going back very far generationally and much hardware is SOL. They released an MCU batch in November so maybe there is going to be more coming. I doubt it. I see someone asking about MCU for the C2xxx series and this is something I doubt will get updated.
If you are solely referring to Meltdown, then your reading is correct. But that would be shortsighted because there is also Spectre.
The SG1000 uses a Cortex-A8 SoC and the SG3100 is based on a Cortex-A9 SoC. Both are affected by the Spectre attack variants 1 and 2, according to ARM. They aren't vulnerable to Meltdown. But then again, there will be a fix for Meltdown coming to FreeBSD soon and pfSense will get updated when that's available (and tested), according to Netgate.
I do get your point about executables not running on a firewall. Attack vectors are limited. Agreed.