Updating to kernel 4.4.120-45.1 leads to "System may be vulnerable to spectre v2"

You are not wrong.