Prefer Chacha on servers that lack AES hardware support?
Yawning suggests this on #15426 (moved). For clients it's a fingerprinting issue, sure, but for servers it's probably an easy safe win. If in fact there are a significant number of relays left where aes is slower than chacha.