A recent bootperf chart shows that cryptohomed startup is apparently blocked 3.5 seconds on flashrom, almost certainly due to this line in cryptohomed.conf:

  (vpd -g stable_device_secret_DO_NOT_SHARE || printf '') >$ABE_DATA_FILE

The problem is that this access flash directly instead of using the VPD cache. That line should likely be changed to:

  (vpd_get_value_DO_NOT_SHARE || printf '') >$ABE_DATA_FILE

Assigning to drcrash who authored this in https://chromium.git.corp.google.com/chromiumos/platform2/+/1a538e150d8ec21d9c5b572ecfb66669162ce30d/cryptohome/init/cryptohomed.conf