For people reading this: tiernano has been super helpful on github & discord. Early triaging shows payload chose quic over TCP despite firewall disabled. Quic is a fallback and not yet CPU optimized, and struggles on windows (looks like a single threaded bottleneck - one core was at 100%). It appears payload jumps to the fallback too quickly, without giving TCP a fair chance first.