agree, I really doubt people were like "let's compromise security for performance". More likely it was something like: "hey here's an idea for how we can get more performance" "convince me it's correct" "oh, that's cause X, Y, Z..."

and either no one thought about the security implications, or no one could come up with a security problem at design time - likely just no one thought about side channel problems.