The researchers published a list of mitigations they believe will address the vulnerabilities allowing both the FLOP and SLAP attacks. They said that Apple officials have indicated privately to them that they plan to release patches.
So this'll likely be mitigated soon, and while you're probably right about the performance hit (which will likely be minor), I don't think (most) Apple users need to be very worried about this.
Speculative execution seems to be the source of a lot of security flaws in many different CPUs. CPU manufacturers seem to be so focused on winning the performance race that security aware architecture design takes the backseat.
Also, it's more and more clear that it's a bad idea that websites can just execute arbitrary code. The JS APIs are way too powerful and complex nowadays. Maybe websites and apps should've stayed separate concepts instead of merging into "web apps".
I also wonder if it'd be possible to design a CPU so vulnerabilities like these are fixable instead of just "mitigable". Similar to how you can reprogram an FPGA. I have no clue how chip design works though, but please feel free to reply if you know more about this.