cat /proc/cpuinfo It's verbose, but it should also list the known processor vulnerabilities that are already worked around by the kernel

I use it both in my work machine and home desktop. It's generally fine and just works on my home box (AMD graphics). The work machine has a HiDPI 4k panel which I've set to 200% scaling - that, along with nVidia graphics has a few issues (especially with Java and electron based apps), but it's been getting better in the few months I've had it, e.g. the latest Firefox fixed some scaling issues.