Is there an option to turn off all mitigations? A public hoster is different to my local build server where security is not an issue and only performance counts.
Part of the mitigations is a microcode update, which may be embedded in your computers firmware (BIOS/UEFI). You could of course _not_ update your server firmware, but it could make you vulnerable to all kinds of security issues.
Instead of embedding code inside org-mode it should be the opposite: embed org-mode inside comment sections. However this is not easily possible because of ‘*’ gobbling up beyond the comment section. (At least for c)