That assumes that the malware can already have arbitrary control over system calls, at which point spectre isn't the issue.