yup, aint no way anyone's training data on latency of every website and app ever. nor would that be possible bc of just so so many possible variations in the stack of execuation. this attack, if feasible for anything, would only work if the user's stack is well known already. even then there's way better ways to attack