Awhile back I had a discussion with a friend on what it takes to move to an entirely new ISA such as RISC-V, and more specifically what the security implications might be. I wrote down some of those thoughts in a brief note and published it here:

struct.github.io/risc-v.html