get_and_add(x, y) is the same as reading ram[ram[x] + ram[y]]

If we can figure out which ram was loaded (timing attack), we know what ram[x]+ram[y] is.
If we already know what ram[x] is, we can figure out what ram[y] is.