It's pretty bad that the prefetcher dereferences anything that looks like a pointer and let's any other process see the address. That's ripe for language theoretical security vulnerabilities.