I hope I’m not missing something here.
Am I correct in saying that for Meltdown or Spectre to run on one of my systems and do their damaging work, the Meltdown or Spectre code must first get into
my system? So should the anti-malware software be keeping me relatively safe from these?
Yes. The chip makers should have figured this out long before now, but in the mean time our systems need to keep running.