How would Spectre, a timing attack that does not require root, affect whether eBPF is safe to run as root?

It doesn't. Spectre means unprivileged use of eBPF is insecure.