Yes, exactlyis this on latest pve 5.2 and only from manual editing the vm conf?
That said, I ran some benchmarks quickly for you.
I'm not sure if it's related to my host (E3 1225 V5) but the AES performance is about 4-5 times better WITHOUT the aes tag. So, I'm removing it from my VM.
Perhaps something has been built in?