I do not know how long it may take to learn why some Intel cpu’s need mitigations=off to work in Linux. The security consequences are not dire, it is unlikely that anything would happen. Many people with intel cpu’s disable this on purpose because on their hw the mitigations cause a performance drop of up to 25%. Also note that our ‘Fast but insecure’ boot option includes this parameter. OM devs would not do that if they thought there was a lot of danger for users. I would enjoy your ROME system, but if you need additional security you may want to reinstall with encryption now that you know the ‘workaround’ for your cpu. I am trying to figure out how to get LUKS or some encryption to work in OMLx systems myself.
You can do an internet search of this to learn more. One bit is this article, got to section 3.7.
I hope this post is making sense. This is a user decision.
Note: Our ‘Fast but insecure’ boot option includes ‘insecure’ because of mitigations=off.